HackTheBox Writeups

45 writeups 22× Easy 15× Medium 5× Hard 3× Insane

Join CTF Team

Difficulty

Tag

Access

Sort

Showing 1–1 of 1

Medium Linux Locked

Flask web app vulnerable to SSTI via user-controlled templates. Exploit Jinja2 injection to achieve RCE, then escalate privileges on Linux for root.

flask ssti python linux +2

Khant-Nyar • Jun 25, 2026 • 4 min read

Other platforms

Proving Grounds 16 TryHackMe 2 All writeups