+++
title = "ScriptCTF 2025 – Challenge Writeup"
description = "ScriptCTF 2025 – Challenge Writeup"
author = "mockingspectre"
date = 2025-08-18
[taxonomies]
tags = ["ctf", "rev", "web", "forensics"]
+++
# ScriptCTF 2025 – Challenge Writeup
![][image1]
Over the weekend, I participated in **ScriptCTF**, a capture-the-flag competition packed with diverse challenges spanning cryptography, forensics, reverse engineering, and web exploitation.
Our team managed position \_\_\_\_\_\_ out of \_\_\_ teams with non zero points.
In this write-up, I’ll walk through some of the problems I solved, breaking down my approach, the tools I used, and the reasoning behind each step. Rather than just dropping final answers, my goal is to document the problem-solving process in a way that’s reproducible and useful for others looking to sharpen their cybersecurity skills.
# Challenge: Renderer
![][image2]
This is the first web challenge; it launches an instance, and the source code is provided for manual code review. There are three important files: two Jinja templates and a Python file.
upload.html
\`\`\`html
\<\!DOCTYPE html\>
\
\
\Upload Image\
\
\
\Upload Images\
\This free to use website allows you to render your images\!\
\
\
\`\`\`
display.html
\`\`\`html
\<\!DOCTYPE html\>
\
\
\View Image\
\
iframe {
max-width: 600px;
max-height: 600px;
border: hidden;
overflow: none
}
\
\
\
\Uploaded Image\
\