oscp – KikChat LFI/RFI exploit code?

I’ve been reading about PWK-Example-Report-v1.pdf at page 7-14 and found that KikChat apps was used in the example.



Copy of the vulnerable apps is available at exploit-db.


However, the actual exploit code/script is no longer there.


I was wondering what is the content of the exploit code above as I would like to reproduce similar scenario in my lab.

Also, if there is similar vulnhub machine, tryhackme or hackthebox machine, please let me know.