A one-page Python Tornado application that greets the visitor by the name given in the URL. The name is pasted into the template source before Tornado renders it.
Pas commencéDockercommit 69a1d36x86_64 · aarch64Secret
Exploit the server-side template injection to run a command on the server and read a file from it.
Le brief de ce lab se trouve dans son dépôt.