TryHackMe — Rabbit Store (Medium) Walkthrough: Mass Assignment → SSRF → SSTI → RabbitMQ → Root
Room: Rabbit Store · Difficulty: Medium · Category: Web / Red Team
TL;DR: A subscription mass-assignment bug unlocks an SSRF endpoint, which exposes an internal API doc revealing a Jinja2 SSTI endpoin
anhbii.hashnode.dev6 min read