A Flask loan calculator backed by MySQL that builds its JSON answers with Jinja templates behind regex and blacklist filters.
Pas commencéDockercommit 8fc839bx86_64 · aarch64Secret
Exploit the server-side template injection weakness of a Flask loan calculator backed by MySQL that builds its JSON answers with Jinja templates behind regex and blacklist filters and read the flag in /flag.
Le brief de ce lab se trouve dans son dépôt.