Marven11/Fenjing
Some data may be outdated — see provenance labels.
专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF observed · 2026-09-21
Health v2 · maintenance only
83/100
- Activity 95
- Release rhythm 62
- Longevity 92
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: 21
- age_days: 1299
- days_rel: 254
- days_push: 30
- n_releases_24m: 12
Adoption not part of the score
1308 stars · 72 forks observed · 2026-09-21
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
Fenjing is an automated Jinja2 SSTI (server-side template injection) exploitation tool designed for CTF competitions. It automatically analyzes a target website's WAF, generates bypassing payloads, and attacks given URLs, HTML forms, or raw HTTP requests.
Use cases
- bypass WAF filters in Jinja2 SSTI challenges
- automatically fuzz and attack CTF web challenge parameters
- generate SSTI payloads from a keyword blacklist in source code
- scan a URL for exploitable template injection points
- crack SSTI via raw HTTP request files or JSON APIs
When to choose
- solving CTF web challenges involving Jinja2 template injection
- you need automated WAF detection and payload generation instead of manual fuzzing
- you want a CLI or web UI to drive SSTI exploitation
When to avoid
- production penetration testing where SSTI exploitation may be out of scope or illegal
- template engines other than Jinja2
- you need a general-purpose web vulnerability scanner
Facets
cli-tool · maturity active
penetration-testing security cli web-scraping security penetration-testing developer-tools python cli cross-platform ssti jinja2 waf-bypass ctf exploit-tool webui docker
2 sources
- readme: https://github.com/Marven11/Fenjing · fetched 2026-09-21 · 3f6a77419856
- registry_pypi: https://pypi.org/pypi/fenjing/json · fetched 2026-08-29 · ee815f3864ea
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| Marven11/Fenjing | main | 83 |
For agents
markdown · JSON · MCP: product_card(name="Marven11/Fenjing")
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem