slug: second_track_1
title: "Second Track"
description: >
  Second Track just announced that they have the most secure backup server running in their data center.
  Turns out Santa uses their services to backup data related to presents' location.

  The only thing we know is that server might be vulnerable to SSTI, what might it be?
  Would you be able to discover what Santa hides there?
category: "web"
points: 500
is_visible: true
complexity: 5
zip: "local"
flag_plaintext: "CTF{pyth0n_sst1_1nj3ct10n_rul3z}"
hints:
  - text: "Try inputs like {{7*7}} or {{config}} to see if the server is vulnerable to SSTI."
    penalty_points: 10
  - text: "Look for ways to read files or execute commands on the server using SSTI techniques."
    penalty_points: 20
  - text: "Use SSTI to read the flag file located on the server."
    penalty_points: 30