Flask on L3B4nk4https://blog.b4nk4.tech/tags/flask/Recent content from L3B4nk4Hugoen-usAll articles on this blog are licensed under the BY-NC-SA license agreement unless otherwise stated. Please indicate the source when reprinting!Thu, 26 Mar 2026 00:00:00 +0200Python Suckshttps://blog.b4nk4.tech/post/python_sucks/Sat, 13 Sep 2025 00:00:00 +0200https://blog.b4nk4.tech/post/python_sucks/ Python Sucks

Author: L3B4nk4()

A Flask challenge from Connectors CTF: SQL injection leads to admin access, the file viewer turns into arbitrary file read, and the exposed Werkzeug console finishes the box with RCE.

Published on 2025-09-13 at L3B4nk4, last modified on 2026-03-26

]]>writeup