Bypassing Security Filters

file; cp /flag.txt ./

Intercept the request

From GET to POST

Click the Change Request Method

Then go back to the main page