webProeasy

PDF Library

hackerlab

Task: PDF download service with hex-encoded file parameter. Solution: Decode hex to discover LFI, use path traversal to read source code, find hidden flag file location in PHP comments.

$ ls tags/ techniques/
lfipath_traversalphplocal_file_inclusionhex_encodingsource_code_disclosure
Local File Inclusion via hex-encoded pathSource code analysis for hidden file discoveryPath traversal with hex encoding bypass
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups