TempImage

Flag0 – Found

• File uploads can be hard to pin down
• What happens to your filename when you see an uploaded file?
• What if you make a small change to the path?

Flag1 – Found

• It clearly wants one specific format
• If you can’t bypass that check, what can you do?
• Read up on PNG chunks