Uploaded March 2024 | Updated September 2026, 7 hours ago

---

In this video, Tib3rius solves the "Labyrinth Linguist" challenge from the HackTheBox Cyber Apocalypse CTF 2024.

0:00 Intro
0:31 Source code review
1:09 Finding an SSTI vulnerability
2:05 Exploiting the SSTI the inferior way
3:02 Using ngrok to serve and catch a reverse shell
5:11 Exploiting the SSTI the superior way
5:35 Explaining ngrok!
7:02 Outro

Twitter: twitter.com/0xTib3rius
Twitch: twitch.tv/0xTib3rius
Courses: courses.tib3rius.com
Udemy: udemy.com/user/tib3rius
Discord: discord.com/invite/4qrvKMh
TikTok: tiktok.com/@0xtib3rius
Threads: threads.net/@0xtib3rius
LinkedIn: linkedin.com/in/tib3rius
Facebook: facebook.com/0xTib3rius
InfoSec Exchange: https://infosec.exchange/@tib3rius
Bluesky: https://bsky.app/profile/tib3rius.bsky.social