webProhard

Minefield

hackerlab

Task: Flask minefield game with balloon parameter. Solution: SSTI in render_template_string() allows RCE via reverse shell to retrieve flag.

$ ls tags/ techniques/
ssti_flaskrender_template_string_injectionblind_rcereverse_shell

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups