Your best friend has just received his first compulsory training course in Web application security.
Amazed by the multitude of common vulnerabilities and their impact, he decided to re-code his blog himself from scratch and add protection mechanisms.
He proudly announced that his server was now "protected against all known vulnerabilities".

Prove him wrong by gaining root access to his machine.

• The CTF ATD flag is in the /passwd file.
• Le flag du challenge est dans le répertoire /root.