Babyseek

Description

<No Description After CTF Ended...>

Solution

We are given simple website which functions as Uppercase Encoder.

babyseek-1

Checking what technology is used with Wappalyzer we find it's Python, which should be a hint for possible SSTI.

babyseek-2

Giving a quick SSTI test:

babyseek-3

First lets find where flag is:

babyseek-4

Profit:

babyseek-5

Flag: FLAG{N1C3!UR_4_B4BY!}