4 min read
UofTCTF 2026 — No Quotes Writeup
A two-character quote ban, escaping the closing quote with a backslash, a hex-encoded UNION injection, and an SSTI in /home via render_template_string that ends in RCE.
#CTF#Cybersecurity#SQL Injection
1 post found
4 min read
A two-character quote ban, escaping the closing quote with a backslash, a hex-encoded UNION injection, and an SSTI in /home via render_template_string that ends in RCE.
#CTF#Cybersecurity#SQL Injection