Tplmap is a security testing tool designed to identify and exploit server-side template injection (SSTI) vulnerabilities and code injection flaws in web applications. The tool automates the detection process by testing various template engines and injection techniques across different web application frameworks. It supports multiple template engines including Jinja2, Twig, Smarty, Velocity, and others commonly used in web development. Tplmap provides exploitation capabilities once vulnerabilities are identified, allowing security professionals to demonstrate the impact of template injection flaws. The tool can execute system commands, read files, and perform other actions depending on the template engine and server configuration. The tool operates through command-line interface and supports various HTTP methods and authentication mechanisms. It includes features for blind injection detection and can work with different payload encoding methods to bypass basic filtering mechanisms.