Flag0 – Found
- File uploads can be hard to pin down
- What happens to your filename when you see an uploaded file?
- What if you make a small change to the path?
Flag1 – Found
- It clearly wants one specific format
- If you can’t bypass that check, what can you do?
- Read up on PNG chunks