The following write-up will show how we passed the web-app level in BSides Algiers CTF which was sponsored by synapse-labs.

From LFI to arbitrary command execution.

Link: http://lnxg33k.net/write-up.pdf