Lab: Basic server-side template injection (code context)

Опубликовано: 20 Октябрь 2024
на канале: oldlamb
14
0

This lab is vulnerable to server-side template injection due to the way it unsafely uses a Tornado template. To solve the lab, review the Tornado documentation to discover how to execute arbitrary code, then delete the morale.txt file from Carlos's home directory.

You can log in to your own account using the following credentials: wiener:peter

https://github.com/vXqw4NdusPm65jTw/W...)