File inclusion flags

flags/PHP_1/Hkuas7VKk7/flag.txt

+Już blisko ...
+
+<?php
+
+//AGH_{FLAGA}

flags/PHP_1/Hkuas7VKk7/site.txt

+1

flags/PHP_1/Hkuas7VKk7/site1.txt

+1

flags/PHP_1/Hkuas7VKk7/site2.txt

+2

flags/PHP_1/Hkuas7VKk7/site3.txt

+3

flags/PHP_1/Hkuas7VKk7/site4.txt

+4

flags/PHP_1/README.md

+php.ini:
+allow_url_include should be enabled

flags/PHP_1/index.php

+<?php
+ini_set('display_errors', 1);
+ini_set('display_startup_errors', 1);
+error_reporting(E_ALL);
+$flag = 'AGH_{FLAGA}';
+$site = filter_input(INPUT_GET, 'site');
+if(!$site){
+    $site='site';
+}
+$header = filter_input(INPUT_SERVER, 'HTTP_KYN');
+
+if($header !== 'test'){
+    echo "Nie masz tutaj wstępu...";
+    exit;
+}
+?>
+Witaj, masz tu parę linków :)<br />
+<a href="?site=site1">Strona 1</a> | 
+<a href="?site=site2">Strona 2</a> | 
+<a href="?site=site3">Strona 3</a> | 
+<a href="?site=site4">Strona 4</a> | 
+<br />
+<pre>
+<?php
+header("FLAG: {$flag}");
+chdir('Hkuas7VKk7');
+
+include_once "{$site}.txt";
+
+echo "<pre>";
+?>
+</pre>
\ No newline at end of file

flags/README.md

@@ -4,4 +4,6 @@ taiga_46:
 taiga_48:
   - supereasy
   - Zwykłe przekierowania w JS
-
+php_1:
+  - medium
+  - niestandardowy naglowek + remote file inclusion