A Flask site for a design studio with an admin area. After login, the session cookie is a base64-encoded Python pickle, and the /user page unpickles whatever cookie it receives.
Not startedDockercommit c4d23e4x86_64 · aarch64Secret
Craft a session cookie that makes the server run your command, and get a shell on it.
The brief for this lab lives in its repository.