Server Side Template Injection Strings in GET Requests

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•1•0•28

Detects Server-Side Template Injection (SSTI) attempts made via GET requests. The rule looks for common SSTI payload strings within the request, specifically excluding requests that result in a 404 Not Found status code to reduce false positives.