Rating:
We were given a button on the webserver which when pressed gave me the info about the system details.
So again dirsearch found robots.txt on the website which when accessed gave me the source code having if else condition mentioning cmd and btn.
So as we press the system details button we see that in the url /?btn= appears so simply i changed btn to cmd and to check for if the commands work i tried ?cmd=ls
and boom it gave me the files inside the directory index.html, index.php and one more file forgot the name. So i simply used command ?cmd=cat+index.php
to notice i wasnt getting the flag anywhere instead the site was getting rendered so I decided to use an alt for cat command and i did the changes ?cmd=tac index.php
and there we go, i found the whole source code with the flag.
