fg0x0's notes
search
โŒ˜Ctrlk
fg0x0's notes
  • ๐Ÿ‘€Introduction
    • ๐Ÿดโ€โ˜ ๏ธAbout me
  • ๐Ÿ‘พoffensive-security
    • ๐ŸฒOSCP
    • โ›“๏ธOSEP
    • ๐Ÿ•ธ๏ธOSWE
    • ๐ŸŒŒPG-Practice
  • ๐ŸšฉRed Team
    • โ˜ข๏ธActive Directory Exploitation
    • ๐Ÿ‘ฟRed Teaming Zero to Hero
    • ๐Ÿ‘ฟRed Teaming All The Things
    • ๐Ÿ•ธ๏ธWeb Exploitation
    • ๐Ÿ’€Binary Exploitation
    • โ˜ ๏ธExploit Development
  • ๐Ÿณ๏ธBlue Team
    • ๐Ÿ”Digital Forensics
    • ๐Ÿ”Cryptography & Math
    • โชReverse Engineering
  • ๐Ÿดโ€โ˜ ๏ธctf
    • ๐Ÿ‡Haruul Zangi
    • ๐Ÿดโ€โ˜ ๏ธOther CTF
  • ๐ŸงŠHackTheBox
    • ๐ŸชŸWindows Machine
    • ๐ŸงLinux Machine
    • โ˜ ๏ธOther Platform Machines
    • spider-webWeb Exploitation
      • ๐Ÿ‘ฝFlask SSTI
        • arrows-to-circleTemplated
        • arrows-to-circlebaby interdimensional internet
        • ๐Ÿ‘ฝbaby todo or not todo
        • dollySlippy ( Jinja2 )
      • vial-virusInjection
      • ๐Ÿ’ฅPrototype Pollution
      • ๐Ÿ˜ตโ€๐Ÿ’ซinsecure deserialization
      • xmark-largeXSS
      • ๐Ÿ‘พSymfony
      • ๐Ÿ‘ฅXXE
      • face-sleepingPing submit hiideg
      • saladRCE
      • arrows-to-circleLFI
      • cabinet-filingFile Upload
      • curling-stoneURL submit hiideg
      • circle-chevron-rightInvoice ilgeedeg
      • dollyHTTP2 smuggling
    • unityForensics
  • ๐Ÿ’€Synack Red Team
gitbookPowered by GitBook
block-quoteOn this pagechevron-down
  1. ๐ŸงŠHackTheBoxchevron-right
  2. spider-webWeb Exploitationchevron-right
  3. ๐Ÿ‘ฝFlask SSTI

๐Ÿ‘ฝbaby todo or not todo

flask, routing

HackTheBox: Baby Todo or Not Todo ChallengeHalcyonic Researchchevron-right
LogoBaby Todo or Not Todoโ€Šโ€”โ€ŠOWASP top 10โ€Šโ€”โ€ŠHacktheboxMediumchevron-right
Previousbaby interdimensional internetchevron-leftNextSlippy ( Jinja2 )chevron-right

Last updated 1 year ago