cspshivam/playground
Modern Level 3 / 14 Medium
← All labs

Directory Traversal (LFI)

A document viewer resolves pages by name inside a base folder with no containment. Escape it and read a file outside.

Documentation viewer

Serves help pages from the docs directory. Pick a page from the menu below.

Pages

The menu pins each page name in a hidden field. Base directory: /var/www/html/pages/. Reading anything outside it means editing that field in the request.

Reading: /var/www/html/pages/about.html

<h1>About us</h1>

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of CSPSHIVAM Playground is not part of the target.