A Flask loan calculator backed by MySQL that builds its JSON answers with Jinja templates.
Not startedDockercommit 0a8f0f7x86_64 · aarch64Secret
Exploit the server-side template injection weakness of a Flask loan calculator backed by MySQL that builds its JSON answers with Jinja templates and read the flag in /flag.
The brief for this lab lives in its repository.