Secure testing Directiory transversal lab

Which lab?
And most likely "../" is filtered out, so you must try something else, e.g. url encode the string or similar alternatives.