hackmyvm: juggling walkthrough

1. get first shell

port scan:

add juggling.hmv to hosts and browsing port 80.

there is a file inclusion in the url blog.php?page=test

use this url by php pseudo-protocol, we get the source code of index.php.

base64 decode:

<?php
	session_start();
	require_once("sqldb_config.php");

	if(isset($_SESSION['username'])) {
        	header("Locat