Templated — HTB Writeup | The Hack Sparrow

An "under construction" page served by Flask/Jinja2. The route name is reflected in the 404 error, enabling SSTI ({{7*7}}=49), RCE and flag disclosure.

Challenge overview

Field	Value
Platform	Hack The Box · Challenge
Category	Web
Difficulty	Easy
State	Retired

Attack map

[Web] Flask/Jinja2
      │
      ▼
[404] route reflected in error
      │
      ▼
[SSTI {{7*7}}=49] confirmed
      │
      ▼
[RCE] __globals__['os'].popen
      │
      ▼
[FLAG]

Página "en construcción" servida con Flask/Jinja2. El nombre de la ruta se refleja en el error 404, lo que permite SSTI ({{7*7}}=49), RCE y lectura de la flag.

Ficha del challenge

Campo	Valor
Plataforma	Hack The Box · Challenge
Categoría	Web
Dificultad	Easy
Estado	Retirado

Mapa del ataque

[Web] Flask/Jinja2
      │
      ▼
[404] ruta reflejada en el error
      │
      ▼
[SSTI {{7*7}}=49] confirmado
      │
      ▼
[RCE] __globals__['os'].popen
      │
      ▼
[FLAG]

🔒 Free account required

This is USER ACCESS content — free to unlock, no payment. The rest of the write-up (and everything else at this level) opens up once you're signed in.

Create a free account