Capture The Flag
MuzzyBox: Practising Injection and Linux Privilege Boundaries
An introduction to my MuzzyBox CTF and the questions I use to investigate NoSQL injection, Python evaluation, SSTI, and Linux escalation.
#ssti
Vulnerability
Server-Side Template Injection: Testing the Template Boundary
How I identify server-side template injection, reproduce it in a small Flask lab, and fix the separation between template source and data.
All 2 posts shown