Webverse-Pro ClockedOut

Enumeration:

• the AI-Bot uses 3 main tools ; the potentially vulnerable one is **render_macro ,**which loads a template and work directly with a template engine .

• based on the response , it's a Jinja2 template engine which is python-based

EXPLOIT:

• we used lipsum which is a built-in function that is automatically integrated in Jinja2
• using .globals we return the global namespace of the module containing lipsum ,which also contains os
• and the most important part is base64 encoding to bypass file content check

Now simply decode the extracted value:

We've achieved our goal