AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
Learn how to exploit a server-side template injection vulnerability in a CTF web challenge through this detailed walkthrough video. Explore the mechanics of bypassing username sanitization through JWT algorithm confusion, allowing injection of malicious Pug template code. Follow along with a comprehensive breakdown covering the challenge's site functionality, source code analysis, SSTI exploitation in Pug, JWT security bypass techniques, and flag exfiltration methods. Master practical web security concepts including template injection, JWT manipulation, and blind payload development while solving this challenge from the Intigriti 1337UP LIVE CTF 2024 competition.
