Web - Server

hello guys,
I have spent numerous hours trying to figure this one out, and I am struggling knowing if I am in the right direction or not.
Here is what I have tried so far:
– use a double encoded characters instead of "."
– put a null byte at the end of .passwd so it does try to access the right file
– inject my own code in the PHP assertion to try to read the file

I would appreciate if someone could give me a hint or let me know if i have the right ideas at all.

Thank you in advance,

Sorry if I’m too late !
You should retry your third solution ;)

I was able to display phpinfo() do I need it or is pure EVILNESS the right track?

Hi,
there’s no need for phpinfo.

focus on.... the title :)

So being evil is the right track?

what do you mean by "being evil" ?

At first I thought it’s in a directory like "/includes/evilness"
Then I have read the title -> read the doc -> tried it with co-hosted website file inclusion.
Base restriction -.-

I did it. It was much easier than I thought.
LOOOL