Solving the Skills Assessment: File Inclusion and Log Poisoning

Introduction

CTF challenges are designed to test your skills in various aspects of cyber security, and this particular challenge focuses on exploiting File Inclusion vulnerabilities along with Log Poisoning. We’ll use techniques like Local File Inclusion (LFI) to achieve remote code execution and eventually discover the flag.

Step 1: Identifying the Vulnerability

Upon accessing the web application, we observe that it takes a parameter called “page” in the URL.

We attempt to test for Local …

ctf cybersecurity hackthebox hackthebox-walkthrough hackthebox-writeup