# Question-1

Tente ler o conteúdo do arquivo 'connection.php' e envie o valor da 'api\_key' como resposta.

<figure><img src="https://4024756925-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZbLrq3t9Su3CqGmkXz7o%2Fuploads%2FPejMZ1npBL30AT3L0IvQ%2Fimage.png?alt=media&#x26;token=6a7a7a6f-0e90-4d3f-b8e2-b7b38d41e18c" alt=""><figcaption></figcaption></figure>

* Preencher o fórmulario em enviar para o burpsuite, em seguida ler o arquivo `connection.php`

<figure><img src="https://4024756925-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZbLrq3t9Su3CqGmkXz7o%2Fuploads%2Fx39WGATCtwSn1WjdNOuP%2Fimage.png?alt=media&#x26;token=728efe05-ae65-483b-b3ce-b2eefa9f0c09" alt=""><figcaption></figcaption></figure>

* Decodificar a string base64

<figure><img src="https://4024756925-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZbLrq3t9Su3CqGmkXz7o%2Fuploads%2FuWvs8wF5MOVqOMyNrRxB%2Fimage.png?alt=media&#x26;token=dceb7ff4-7c52-4562-a4db-f0ae683a29a9" alt=""><figcaption></figcaption></figure>