🚩

HitCat

offensive security blog 📖

Tags

3 pages

Flask

X-Forwarded-For 403 bypass and Flask session forgery - Pragyan CTF 2025

Featured image of post X-Forwarded-For 403 bypass and Flask session forgery - Pragyan CTF 2025

Cracking a weak JWT secret into Jinja2 SSTI RCE - HeroCTF v5

Featured image of post Cracking a weak JWT secret into Jinja2 SSTI RCE - HeroCTF v5

Source disclosure to Jinja2 SSTI RCE on Flask - PwnMe 2023

Featured image of post Source disclosure to Jinja2 SSTI RCE on Flask - PwnMe 2023