$ cat writeup.md…
$ cat writeup.md…
hackerlab
Task: Flask web app with WAV file upload and speech-to-text functionality, hidden KeyCodes page mapping F-keys to special characters. Solution: SSTI via voice command injection - speak "F5 F5 config F6 F6" to inject {{config}} and leak SECRET_KEY.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar