Discussion on "TryHackMe — Rabbit Store (Medium) Walkthrough: Mass Assignment → SSRF → SSTI → RabbitMQ → Root"

Hồ Quang Anh · 2026-07-04T07:00:32.507Z

Room: Rabbit Store · Difficulty: Medium · Category: Web / Red Team TL;DR: A subscription mass-assignment bug unlocks an SSRF endpoint, which exposes an internal API doc revealing a Jinja2 SSTI endpoin

Discussion on "TryHackMe — Rabbit Store (Medium) Walkthrough: Mass Assignment → SSRF → SSTI → RabbitMQ → Root" | Hashnode

Search Hashnode

TryHackMe — Rabbit Store (Medium) Walkthrough: Mass Assignment → SSRF → SSTI → RabbitMQ → Root

Responses