Tags: web php filter 

Rating: 3.0

PHP filter only allows commands that are less than 5 chars, but are not in the list of blacklisted 2 char strings. Goal is to find a 2 letter linux binary that can be used to read the flag file.

Full video walkthrough: https://www.youtube.com/watch?v=vt71JJLmaVY

Original writeup (https://www.youtube.com/watch?v=vt71JJLmaVY).