SSTI Exploitation in Twig: Same Idea, Different Language

Jinja2 was Python. Twig is PHP. The vulnerability is the same — the path looks completely different. Part 3 of the SSTI series.