Cobra e9735a15bb Fix #208: Prevent SSTI in responder_mgr.py Jinja2 template ...

- Use jinja2.Environment with BaseLoader instead of Template
- Enable autoescape=True to escape all template variables
- Sanitize relay_targets by converting to strings: [str(ip) for ip in ...]
- Prevents template injection even if relay_targets contains malicious content

2026-04-06 11:38:59 -04:00

..

__init__.py

Phase 4: Active modules, templates, and operator scripts

2026-03-18 13:48:11 -04:00

arp_spoof.py

Phase 4: Active modules, templates, and operator scripts

2026-03-18 13:48:11 -04:00

bettercap_mgr.py

Phase 4: Active modules, templates, and operator scripts

2026-03-18 13:48:11 -04:00

dhcp_spoof.py

Phase 4: Active modules, templates, and operator scripts

2026-03-18 13:48:11 -04:00

dns_poison.py

Phase 4: Active modules, templates, and operator scripts

2026-03-18 13:48:11 -04:00

evil_twin.py

Phase 4: Active modules, templates, and operator scripts

2026-03-18 13:48:11 -04:00

ipv6_slaac.py

Phase 4: Active modules, templates, and operator scripts

2026-03-18 13:48:11 -04:00

mitmproxy_mgr.py

Phase 4: Active modules, templates, and operator scripts

2026-03-18 13:48:11 -04:00

ntlm_relay.py

Phase 4: Active modules, templates, and operator scripts

2026-03-18 13:48:11 -04:00

responder_mgr.py

Fix #208: Prevent SSTI in responder_mgr.py Jinja2 template

2026-04-06 11:38:59 -04:00