We logged in using the supplied credentials and was able to see that we can upload images to the server :

We uploaded a simple php webshell named shell.php

We were able to execute commands using that php file :

Finally we were able to access the secret file and submit it, Thus solving the lab :