Injectics — TryHackMe Writeup (backslash SQLi → admin creds + Twig SSTI sandbox escape → RCE)
Platform: TryHackMe · Difficulty: Medium · Category: Web (SQLi + SSTI/RCE)
Stack: Apache/PHP 8, MySQL 8.0.41 (app connects as root@localhost), Twig ≥2.14.11
Flags: THM{INJECTICS_ADMIN_PANEL_007} · THM
anhbii.hashnode.dev4 min read