Basic server-side template injection (code context) - PRACTITIONER
This lab is vulnerable to server-side template injection due to the way it unsafely uses a Tornado template. To solve the lab, review the Tornado documentation to discover how to execute arbitrary code, then delete the morale.txt file from Carlos's home directory.
You can log in to your own account using the following credentials: wiener:peter
Hint
Take a closer look at the "preferred name" functionality.
On this page of the site you can watch the video online Basic server-side template injection (code context) - PRACTITIONER with a duration of hours minute second in good quality, which was uploaded by the user AmirHossein Soltani 21 October 2023, share the link with friends and acquaintances, this video has already been watched 44 times on youtube and it was liked by 0 viewers. Enjoy your viewing!
