[ir0nman4l1f3]

1.  Exploit a SSRF vulnerability to identify an internal web application. Access the internal application to obtain the flag. -> HTB{911fc5badf7d65aed95380d536c270f8}
   
2. Exploit the SSRF vulnerability to identify an additional endpoint. Access that endpoint to obtain the flag. -> HTB{61ea58507c2b9da30465b9582d6782a1}
   
3. Exploit the SSRF to identify open ports on the system. Which port is open in addition to port 80? -> 5000
   
4. Apply what you learned in this section and identify the Template Engine used by the web application. Provide the name of the template engine as the answer. -> Twig
   
5. Exploit the SSTI vulnerability to obtain RCE and read the flag. -> HTB{295649e25b4d852185ba34907ec80643}
   
6. Exploit the SSTI vulnerability to obtain RCE and read the flag. -> HTB{5034a6692604de344434ae83f1cdbec6}
   
7. Exploit the SSI Injection vulnerability to obtain RCE and read the flag. -> HTB{81e5d8e80eec8e961a31229e4a5e737e}
   
8. Exploit the XSLT Injection vulnerability to obtain RCE and read the flag. -> HTB{3a4fe85c1f1e2b61cabe9836a150f892}
   
9. Obtain the flag -> HTB{3b8e2b940775e0267ce39d7c80488fc8}