ctfshow web4

ctfshow web4

When I open the link

Tips ： <?php include($_GET['url']);?>
It can be seen that some files contain vulnerabilities
Yes include function
Look at the log file directly by inserting commands
The log file is in var/log/nginx/access.log Under the table of contents
Add a sentence to the packet capture Trojan horse ：
Try the ant sword connection ：

Enter the change directory to find flag
Last in www In the directory flag