Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
llama_facts — Web application vulnerable to Python3 Flask SSTI (CVE-2019-8341) | Kitploit
Tools/GitHubGitHub/adindrabkin/llama_facts
Vulnerability AnalysisWeb Application ExploitationWeb SecurityCTFLearning & EducationLabs & Practice
GitHubadindrabkin/llama_facts

llama_facts

Web application vulnerable to Python3 Flask SSTI (CVE-2019-8341)

View Repository
3 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Llama Facts

This project was originally created for the Rochester Institute of Technology (RIT) Women in Cybersecurity (WIYCS) 2022 CTF competition. It is vulnerable to Server-Side Template Injection (SSTI), defined in the disputed CVE CVE-2019-8341.

Challenge Description

Description: A Computer Science 1 student created a website to showcase their newly-acquired python skills. Can you look into their search engine to ensure it is secure?

Usage

Requires having docker engine installed and running.

docker build -t wiycs_web . && docker run -p 5656:5656 -it wiycs_web

Then navigate to http://localhost:5656 and test your SSTI skills! Hopefully you'll learn a few llama facts along the way.

Download Tool