$ cat writeup.md…
$ cat writeup.md…
hackadvisor
Task: Flask document signing platform with export feature that accepts a user-controlled filename parameter. Solution: Path traversal via ../../../tmp/flag.txt in the filename parameter to read arbitrary files from the server.
Permission denied (requires tier.pro)
Sign in with GitHub or Discord to continue. No email required.
$sign in$ grep --similar