Pinned

1. Solving "includer's revenge" from hx... Solving "includer's revenge" from hxp ctf 2021 without controlling any files

   1

   # Solving "includer's revenge" from hxp ctf 2021 without controlling any files

   2

   # The challenge

   3

   The challenge was to achieve RCE with this file:

   4

   ```php

   5

   <?php ($_GET['action'] ?? 'read' ) === 'read' ? readfile($_GET['file'] ?? 'index.php') : include_once($_GET['file'] ?? 'index.php');