The three points were an obvious error. But it was just an error in presentation, not the real error.
I would start with ./../etc/passwd and then insert more /../ until I can access the passwd file. You know absolute path and filename of the passwd file so I would try to access this file first. If you are on a unix machine there will be the file /etc/passwd.
Does anybody have a solution to this?
I went through the cheat sheet, encoded, than double encoded all of the examples still unable to open the passwd file not to mention the actual task.
One way I found out was to try and get back to the original file to make sure I had the encoding correct for example:
languages/....//languages/en.php
Should take you back to the en.php page.
From there, I changed en.php to flag.txt
languages/....//flag.txt
Then it’s just a guessing game on how many ....// you need to add.
Unless there is a specific way to find out how many …// ?
I was confused though because I thought the flag file was in the languages directory since it said /flag.txt
Hint: If the path doesn’t work right away, try adding more ....// to go further up the directory structure. Just make sure to keep languages in the path to bypass any filters. Feel free to DM me if you need a hint — I’ll try to respond as quickly as I can good luck!
