LFI / RFI – I haven’t been PHPed like that since grade school

By far the thing I struggled the most with during the labs was local and remote file inclusion.

How did I overcome this? No clue. Just kept hitting buttons until it worked most of the time.

Paying attention to see if it needed a file extension or not helped. Sometimes you’ll need to include the .php and sometimes you don’t, sometimes it needs to be .txt instead. Why? Because php hates you, that’s why.