webeasy

file_get_contents SSRF

spbctf

Task: PHP web application with file_get_contents() loading resources by URL. Solution: Used php://filter wrapper to read source code in base64, found flag in $flag variable.

$ ls tags/ techniques/
ssrflfiphpfile_get_contentsphp_filter
php_filter_wrapperssrf_source_disclosurebase64_source_read
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]