File path traversal, simple case

Let's access the image.

We can now intercept this request in BurpSuite using the Proxy.

Now, we can forward the request to the Repeater to makes changes in it.

Let's change the filename parameter to the following and forward the request:

../../../etc/passwd

We have solved the lab.