{"provider_url":"https://hatena.blog","author_url":"https://blog.hatena.ne.jp/Rooty/","height":"190","author_name":"Rooty","width":"100%","url":"https://shawroot.hatenablog.com/entry/2019/11/18/TokyoWesternsCTF-WEB%EF%BC%9Ashrine","type":"rich","image_url":"https://i.loli.net/2019/11/18/hH36zy8nLO4GS2W.png","blog_title":"\u300c\u914d\u67aa\u6731\u4e3d\u53f6\u3002\u300d","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fshawroot.hatenablog.com%2Fentry%2F2019%2F11%2F18%2FTokyoWesternsCTF-WEB%25EF%25BC%259Ashrine\" title=\"TokyoWesternsCTF-WEB\uff1ashrine - \u300c\u914d\u67aa\u6731\u4e3d\u53f6\u3002\u300d\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","categories":["python","web"],"provider_name":"Hatena Blog","published":"2019-11-18 12:07:12","blog_url":"https://shawroot.hatenablog.com/","version":"1.0","description":"\u5b66\u4e60\uff1a \u4ece flask+jinjia2 \u8ba4\u8bc6 SSTI \u670d\u52a1\u7aef\u6a21\u677f\u6ce8\u5165 | AbelChe's Blog Tokyo Westerns CTF 2018 WEB Wp | \u7801\u519c\u7f51 \u9898\u76ee\u91cc\u53ea\u7ed9\u51fa\u4e86\u4e00\u4e2a\u6e90\u4ee3\u7801\uff1a import flask import os app = flask.Flask(__name__) app.config['FLAG'] = os.environ.pop('FLAG') @app.route('/') def index(): return open(__file__).read() @app.route('/shrine/<path:shrine>') def shr\u2026","title":"TokyoWesternsCTF-WEB\uff1ashrine"}