webeasy

Waf

spbctf

Task: LFI challenge with WAF that filters path traversal sequences. Solution: Bypass single-pass WAF filter using nested path traversal (....// becomes ../ after filtering).

$ ls tags/ techniques/
waf_bypasslfipath_traversalfilter_bypassnested_traversal
lfi_waf_bypassnested_path_traversaldouble_encoding
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]