📂 05 — Local/Remote File Inclusion

Medium
Easy Medium Hard
0/3 solved

🔬 Medium — Null-Byte Bypass

The file viewer appends .txt to your filename. Bypass this restriction.

(automatically appends .txt)
Use a null byte: ../../../etc/passwd%00. Older versions of Python (and PHP) treat \x00 as a string terminator, stripping the .txt.