We found a web page with images:
We opened the image in a new tab and were able to see that the image is loaded using the filename parameter:
We viewed the /etc/passwd file using ../ to traverse the directory:
https://0ad8004003c6671680eb853200ff0079.web-security-academy.net/image?filename=../../etc/passwd
And we were able to solve the lab:
