← All Challenges
Challenge 38 of 66
File Includer
🟠 Hard
Injection
+100 XP
A PHP page includes files based on a parameter: page.php?file=about. Exploit LFI to read sensitive files using PHP filters.
Use php://filter/convert.base64-encode/resource= to read PHP source code.