Feb 7
Spookifier Hack The Box Walkthrough – SSTI Web Challenge
This article is a walkthrough for the Spookifier Hack The Box web challenge. Spookifier is a Python-based web challenge that revolves around Server-Side Template Injection (SSTI). We will also talk about the multiple payloads for SSTI and mitigation of it. Before we start -What Is SSTI (Server-Side Template Injection)? Server-Side Template Injection occurs when a web application takes…