Super Secret Tip [Walkthrough - Part 2] -- TryHackMe LIVE! 

Join the Hack Smarter community: hacksmarter.org
--- In this video, I continue working through the "Super Secret Tip" room on TryHackMe. We use LFI to discover an encrypted password, write a Python script to decrypt it, and then perform Server-Side Template Injection (SSTI) to land a shell on the machine.
We finally locate the first flag and begin searching for privilege escalation.
Enjoy!
-----------
Twitch: hacksmarter.live
Discord: / discord
Caido: caido.io