DDC DDC2025-NATIONALS web Template Trap 03 May 2025 The page takes an input, reverses it and spits it back out. From the code (and the challenge name), it is clear that the page is vulnerable to SSTI. Creating a payload without space (blacklisted) and then reversing it: Gives the flag:
