All rooms Sign in
WEBLesson + challenge Live machinePremium

Template Trap

A quarterly-report studio with one field too clever — and a firewall that only watches the front door.

A quarterly-report studio with one field too clever — and a firewall that only watches the front door.

Difficulty
Hard
Estimated time
40 min
Points
350 pts
Completions
Be the first to complete it
Authors
By Cyber Academy 4 U
Create a free account to startSign in

What you will learn

  • Confirming and exploiting Server-Side Template Injection in Jinja2 (OWASP A03 — Injection).
  • Defeating a keyword/character blacklist that even blocks `.` and `_` in the watched field.
  • Using Jinja `|attr()` and `[...]` getitem (which falls back to getattr) in place of dotted access.
  • Smuggling forbidden tokens through un-inspected request parameters to reach a reliable RCE gadget.

What is inside

  1. Task 1 · Template Trap1 question

Sign in to read the tasks, start the machine and answer the questions.