Tags: sqli ssrf lfi 

Rating:

**Official Writeup**

**tl;dr**

+ `/source` to get the source
+ Access local host from `dev_test` using SSRF
+ SQLI to get the flag path a nd LFI to get the flag

Link to the writeup: https://blog.bi0s.in/2021/08/15/Web/Vuln-Drive-InCTF-Internationals-2021/

Author: [Rohit](https://twitter.com/RohitNarayana11), [Skad00.sh](https://twitter.com/RahulSundar8), [Malf0y](https://twitter.com/mal_f0y), [Careless_finch](https://twitter.com/careless_finch)

Original writeup (https://blog.bi0s.in/2021/08/15/Web/Vuln-Drive-InCTF-Internationals-2021/).