If you want to test the demo yourself, check my Github.
https://github.com/guusec/SSTI-Demo
For more information on SSTI, I always refer to the payloadallthethings Github.
https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Template%20Injection
