> For the complete documentation index, see [llms.txt](https://rayyanwong.gitbook.io/rayyan/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://rayyanwong.gitbook.io/rayyan/ctfs/lag-n-crash-2022-march/lnc2022-writeups/ezgo-web-exploitation.md).

# Ezgo ( Web exploitation )

Challenge: ezgo

 ( Another SSTI question )

* When using linux, chmod +x (file) 
* ./file
* Opens website
* Look through the source.go file

![](https://lh5.googleusercontent.com/b2kGu-08sMP-_Lm3qQR9yzsuvHPKPgL-39cFUpTAg_9ZWjF5TrGtpMTtpVsO4Wj2of-i5MeZeMq2q3KLTzY0eVFXg8F9Q2v1KKmS5QMZoYh3Ox6sFEsNP6uZTcybrJEU2NZCeLIA)

* Just tried SSTI `{{ .Getflag }}` in the input and submit :)

( Another file given was a window\.exe file which creates an instance when I run it instead of having to create an executable in linux )

<mark style="color:blue;">**`LNC2022{G0_gO_g0Oo}`**</mark>