HackTheBox - Nunchucks

SSTI in Nunjucks and SUID capability on Perl

HackTheBox - Gobox

SSTI in Golang, abuse S3 bucket, and NGINX backdoor

Linux · S3 · AWS · LocalStack · Go · SSTI

HackTheBox - Doctor

Seven times seven is equal to SSTI