21 lines
846 B
YAML
21 lines
846 B
YAML
slug: second_track_1
|
|
title: "Second Track"
|
|
description: >
|
|
Second Track just announced that they have the most secure backup server running in their data center.
|
|
Turns out Santa uses their services to backup data related to presents' location.
|
|
|
|
The only thing we know is that server might be vulnerable to SSTI, what might it be?
|
|
Would you be able to discover what Santa hides there?
|
|
category: "web"
|
|
points: 500
|
|
is_visible: true
|
|
complexity: 5
|
|
zip: "local"
|
|
flag_plaintext: "CTF{pyth0n_sst1_1nj3ct10n_rul3z}"
|
|
hints:
|
|
- text: "Try inputs like {{7*7}} or {{config}} to see if the server is vulnerable to SSTI."
|
|
penalty_points: 10
|
|
- text: "Look for ways to read files or execute commands on the server using SSTI techniques."
|
|
penalty_points: 20
|
|
- text: "Use SSTI to read the flag file located on the server."
|
|
penalty_points: 30 |