/Jinja2-ExploitMe

Primary LanguageHTMLMIT LicenseMIT

Jinja2-ExploitMe

[BEW 2.3: Web Security] Clone this repo to begin the SSTI exploit activity.

  1. by far the easiest challenge, multiply two ints, figured that out fairly quickly. {{2*2}} will return 4
  2. the string * int was much trickier, tried a bunch of different options to get that to work. finally got it to work with {{2|string*7}}. this output 2222222, which is exactly what I wanted.