http://attacker-ip/test.php?file=/etc/passwd

sdfg