🚩

HitCat

offensive security blog 📖

Home
About
CTF WriteUps
Search
1. Dark Mode

Search

Archives

Categories

Tags

PHP SSTI Command Injection Flask Python RCE Social Media GraphQL IDOR Information Disclosure Jinja2 Mass Assignment Privilege Escalation Race Condition Weak Secret Access Control Account Takeover API Authentication Bypass Batching Attack

Tags

2 pages

Jinja2

Jinja2 SSTI in a card generator - Pragyan CTF 2025

Jinja2 SSTI in a card generator - Pragyan CTF 2025

Source disclosure to Jinja2 SSTI RCE on Flask - PwnMe 2023

Featured image of post Source disclosure to Jinja2 SSTI RCE on Flask - PwnMe 2023

© 2023 - 2026 HitCat

Built with Hugo
Theme Stack designed by Jimmy