I am messing with a web site on a training rig and noticed I can inject php into the url. I need to get to the root directory in order to access a file to get a flag. I am guessing that I can run Linux commands on the box and do cd .. But I need to run them in PHP I have looked at PHP functions like exec() , shell_exec() and system() but all are disabled.
Can anyone maybe throw some light on something I have not tried?