Lost Fortune IncludedA PHP stream-wrapper bypass defeats the document whitelist and reads arbitrary files from the server. Aug 8, 2026 TryHackMeTHM DEFCON CTF Event