Template-Twister is a Flask-based Server-Side Template Injection (SSTI) challenge designed for Capture The Flag (CTF) enthusiasts. The objective is to exploit the SSTI vulnerability to read the flag.txt file and retrieve the flag.
SSTI (Server-Side Template Injection) occurs when user inputs are insecurely processed by a template engine, leading to arbitrary code execution on the server.
In Template-Twister, your mission is to identify and exploit the SSTI vulnerability to read the content of the flag.txt file located on the server.
Follow the steps below to set up and run the challenge locally:
- Clone the Repository
Clone the project from GitHub:git clone https://github.com/m-vp/Template-Twister.git cd Template-Twister