Access environment variables via Lambda Function with SSTI

Learn how to exploit a Server-Side Template Injection (SSTI) vulnerability in an AWS Lambda-based web application. In this lab, you'll discover default credentials in a startup's web portal with a template-based audit report system, then craft SSTI payloads to execute system commands and access sensitive Lambda environment variables. Through hands-on practice, you'll understand both the attack methodology and learn essential mitigation strategies for securing serverless applications.