🚀 Submit a Challenge — SecDim AppSec Village CTF at DEF CON 34 and Win a ROG Xbox Ally

Sign InContact sales
Sign InContact sales

A $10,000 security bug: Identify, exploit and effectively fix SSTI

Blog··1 min read

in 2016, Uber paid out $10,000 for a security bug that could result into RCE. In this live workshop, we will learn how to identify, write security tests, exploit and effectively fix this severe bug across in TypeScript, Go and Python.

Labs:

  1. SSTI in TypeScript
  2. SSTI in Python
  3. SSTI in Go

Questions or comments? Discuss this post on SecDim Community →

Try it yourself

Find, Hack and Fix Your First Vulnerability

Reading about security bugs is one thing — fixing one is how the skill sticks. Play a free challenge from the wargame, no setup required.

Try a Challenge

Training for your team? Book a demo →