A Flask page whose content comes from a base64-encoded YAML document in the URL, parsed with PyYAML's unsafe yaml.load.
Pas commencéDockercommit 2ce437dx86_64 · aarch64Secret
Craft a YAML document that makes PyYAML run a command on the server when it is loaded (insecure deserialization).
Le brief de ce lab se trouve dans son dépôt.