Skip to content

Lesson plan with demo application detailing exploitation of server-side template injection to achieve remote-code execution

Notifications You must be signed in to change notification settings

limsammy/flask-rce-ssti-poc-lesson

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

13 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Flask Remote-Code-Execution Proof of Concept and Lesson Plan

Lesson Plan

Click here to visit the lesson plan (or navigate to the lesson_plan.md file in the root project directory)

Local Setup

  1. Please install Python 3.9
  2. Once installed, install Flask via pip install flask
  3. Navigate to the app directory cd app
  4. Set the flask app environment var export FLASK_APP=main
  5. Run the dev server flask run
  6. You can now visit http://127.0.0.1:5000/

About

Lesson plan with demo application detailing exploitation of server-side template injection to achieve remote-code execution

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published