webeasy

PDF Library

hackerlab

Task: PDF download service with hex-encoded file parameter. Solution: Decode hex to discover LFI, use path traversal to read source code, find hidden flag file location in PHP comments.

$ ls tags/ techniques/
lfipath_traversalphplocal_file_inclusionhex_encodingsource_code_disclosure
Local File Inclusion via hex-encoded pathSource code analysis for hidden file discoveryPath traversal with hex encoding bypass
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]