# Snyk Fetch the Flag CTF 2023 writeup: Protect The Environment

DevFeed: [Snyk Fetch the Flag CTF 2023 writeup: Protect The Environment](<https://devfeed.tech/articles/snyk-fetch-the-flag-ctf-2023-writeup-protect-the-environment-8131.md>)

Original publisher: [Read original article](<https://snyk.io/blog/snyk-fetch-the-flag-ctf-2023-writeup-protect-the-environment/>)

Author: John Hammond

Published: 2023-11-30T08:00:00Z

Content type: tutorial

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [ctf](<https://devfeed.tech/topics/ctf.md>), [Flask](<https://devfeed.tech/topics/flask.md>)

Tags: [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [ctf](<https://devfeed.tech/tags/ctf.md>), [developer](<https://devfeed.tech/tags/developer.md>), [external](<https://devfeed.tech/tags/external.md>), [flask](<https://devfeed.tech/tags/flask.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk](<https://devfeed.tech/tags/snyk.md>)

## AI overview

This Snyk writeup explains the solution to the Protect The Environment challenge from the 2023 Fetch the Flag CTF. The challenge involves a hand-rolled Base64 encoding layer for paths that interferes with Flask's static-file handling and enables a file inclusion attack. The supplied article text is incomplete and omits parts of the exploitation details.

## Source excerpt

If you were at Snyk's 2023 Fetch the Flag and are looking for the answer to the Protect The Environment challenge, you've come to the right place. Let's walk through the solution together!