when i just the website i tested ssti on input and here is the test:


it worked so i make sure to have RCE on that.


so yeah i have now rce and just need to cat flag