Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
FileShare lets users list and download files from a shared folder. Check whether the filename parameter passed to the download endpoint is properly validated.
The download URL is /api/download?file=filename
Try path traversal using `../`
Try requesting file=../../../flag.txt with curl