# Cafe Club

Level: Easy\
Points: 10\
Type: Daily Challenge

Lab Interface

<figure><img src="https://559802299-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8C3FiojCIEtxH7nox2Do%2Fuploads%2FrPYjRGux52g8XTUGQQCz%2Fimage.png?alt=media&#x26;token=a6f856e9-536d-455e-8d6b-4128b6f13018" alt=""><figcaption></figcaption></figure>

Request we are interested in

<figure><img src="https://559802299-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8C3FiojCIEtxH7nox2Do%2Fuploads%2F4ECdTuMWi58fdrP3RPp6%2Fimage.png?alt=media&#x26;token=8a3e4146-bb46-4d3f-9b17-50544f0e397f" alt=""><figcaption></figcaption></figure>

First thing that I tried here is LFI payload `../../../../../../../etc/passwd`

<figure><img src="https://559802299-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8C3FiojCIEtxH7nox2Do%2Fuploads%2FUIpTrDp6IQHkLmxh5Gvz%2Fimage.png?alt=media&#x26;token=9e7e32e8-7649-4f54-83b5-1e313c9320db" alt=""><figcaption></figcaption></figure>

After little bit of trial and error, got the flag.

<figure><img src="https://559802299-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8C3FiojCIEtxH7nox2Do%2Fuploads%2FX9a5xijFFqkyAqEGPmKX%2Fimage.png?alt=media&#x26;token=de5d9890-dc7d-446c-9595-1b077585fe67" alt=""><figcaption></figcaption></figure>