Server-Side Template Injection (SSTI)

Spookifier Challenge on HackTheBox Challenge Description There’s a new trend of an application that generates a spooky name for you. Users of that application later discovered that their real names were also magically changed, causing havoc in their life. Could you help bring down this application? Overview When I first looked at the challenge, I

Challenge Link: JinjaCare — HTB Challenge Description JinjaCare is a web application designed to manage COVID-19 vaccination records. It allows users to view their personal information, medical history, and generate digital vaccination certificates. Your task is to discover vulnerabilities in the system and extract the hidden flag. Recon and Initial Exploration Upon launching the instance, the home