webeasy

Странный сервер (Strange Server)

hackerlab

Task: Web application with URL reflection on /same page. Solution: Exploited Jinja2 SSTI vulnerability using url_for.__globals__ to achieve RCE and read the flag.

$ ls tags/ techniques/
flaskrcesstipythonserver_side_template_injectionjinja2url_forbuiltins
Server-Side Template Injection (SSTI) in Jinja2RCE via url_for.__globals__['__builtins__']['__import__']('os').popen()URL reflection vulnerability detection
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]