RecipeBox — Family Recipes

Recipe File Explorer

Enter a base64-encoded path to read any file on the server. Direct paths matching blacklist patterns are blocked.

Try: L2V0Yy9wYXNzd2Q= L2V0Yy9ob3N0cw== /proc/self/status local recipe

200 OK — File Read Successfully

Base64 decoded from: README.md

# RecipeBox — Family Recipe Manager

A warm, family-style recipe box application.

## Features
- Browse family recipes with beautiful cards
- View detailed recipe information (cuisine, cook time, ingredients)
- Filter by cuisine type
- Recipe File Explorer with base64-encoded path support

## Security Notice
This application demonstrates Local File Inclusion (LFI) using a base64-encoded path bypass technique. Direct paths matching blacklisted patterns (e.g., `etc/passwd`, `../`) are blocked with a 403 Forbidden response. However, paths encoded as base64 strings bypass the filter.

### Example:
```
?f=etc/passwd           → 403 Forbidden (blacklisted)
?f=L2V0Yy9wYXNzd2Q=    → 200 OK (base64 of /etc/passwd)
```

This technique is applicable across SQL injection, SSTI, XSS, LFI, and many other contexts.