An nginx front with two Flask services: an app that fetches a script URL from an API service, and the API. The flag is in /FLAG.txt on the app service.
Not startedDockercommit de33cdex86_64 · aarch64Secret
Exploit the command injection weakness of an nginx front with two Flask services: an app that fetches a script URL from an API service, and the API. The flag is in /FLAG.txt on the app service and read the flag in /FLAG.txt.
The brief for this lab lives in its repository.