+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [LFI] Medium/Hard Challange [LFI] (/showthread.php?tid=2917053)
[LFI] Medium/Hard Challange [LFI] - Dr_Rockso - Oct 4, 2012
http://swatpaintball.com/
This is a fairly tricky LFI, I want to see who can find it.
Bonus points for poisoning the access log
Spoiler (Click to View)
lang=
Solved:
livevil
* - livevil - Oct 5, 2012
LFI found:
Spoiler (Click to View)root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin news:x:9:13:news:/etc/news: uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin gopher:x:13:30:gopher:/var/gopher:/sbin/nologin ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin nobody:x:99:99:Nobody:/:/sbin/nologin vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin popa3d:x:84:84::/dev/null:/dev/null rpm:x:37:37::/var/lib/rpm:/sbin/nologin pcap:x:77:77::/var/arpwatch:/sbin/nologin nscd:x:28:28:NSCD Daemon:/:/sbin/nologin mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin apache:x:48:48:Apache:/var/www:/sbin/nologin mailman:x:41:41:GNU Mailing List Manager:/usr/lib/mailman:/sbin/nologin webalizer:x:67:67:Webalizer:/var/www/usage:/sbin/nologin xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin webadmin:x:79:79:Web Administrator:/var/www/html:/sbin/nologin clamav:x:100:101:Clam Anti Virus Checker:/var/clamav:/sbin/nologin majordomo:x:102:2:Majordomo:/var/majordomo:/sbin/nologin postgres:x:103:106:Postgres:/home/postgres:/bin/bash postfix:x:89:89::/var/spool/postfix:/sbin/nologin mysql:x:104:107:MySQL server:/var/lib/mysql:/bin/bash named:x:25:25:Named:/var/named:/sbin/nologin dovecot:x:105:108:Dovecot IMAP server:/usr/libexec/dovecot:/sbin/nologin jaygarcia:x:500:500:Administrative User:/home/jaygarcia:/bin/sh candygarcia:x:501:501:Candy:/home/candygarcia:/sbin/nologin ufaq:x:503:503:ufaq:/home/ufaq:/bin/tcsh spam:x:504:504:spam:/home/spam:/sbin/nologin jay:x:505:505:Jay Garcia:/home/jay:/bin/sh ud:x:506:506:Uncle Duck:/home/ud:/sbin/nologin daffyduck:x:507:507:Daffy Duck:/home/daffyduck:/sbin/nologin doug:x:511:511:Doug Decota:/home/doug:/bin/tcsh webmaster:x:513:513:Jay Garcia:/home/webmaster:/sbin/nologin reg-ufaq:x:519:519:RegUFAQ:/home/reg-ufaq:/sbin/nologin out:x:520:520:Outgoing:/home/out:/sbin/nologin gumbo:x:521:521:Gumbo:/home/gumbo:/sbin/nologin goldfish:x:522:522:Sir Gold Fish:/home/goldfish:/sbin/nologin braidnboots:x:527:527:Tina Wilcox:/home/braidnboots:/sbin/nologin dvr:x:531:531:dvr:/home/dvr/www/dvr.jaygarcia.com/DVR:/sbin/nologin legal:x:535:535:Charmaigne M Landrieu:/home/legal:/sbin/nologin postmaster:x:538:538:postmaster:/home/postmaster:/sbin/nologin pondlady:x:539:539:Jan Goldfield:/home/pondlady:/sbin/nologin jan:x:540:540:Jan:/home/jan:/sbin/nologin dvr2:x:541:541:dvr2:/home/dvr/www/dvr.jaygarcia.com/DVR/DVR2:/sbin/nologin dvr3:x:542:542:dvr3:/home/dvr/www/dvr.jaygarcia.com/DVR/DVR3:/sbin/nologin dvr4:x:543:543:dvr4:/home/dvr/www/dvr.jaygarcia.com/DVR/DVR4:/sbin/nologin dvr5:x:544:544:dvr5:/home/dvr/www/dvr.jaygarcia.com/DVR/DVR5:/sbin/nologin dvr6:x:545:545:dvr6:/home/dvr/www/dvr.jaygarcia.com/DVR/DVR6:/sbin/nologin accordex:x:546:546:Accordex:/home/accordex:/sbin/nologin nunyabizness:x:548:548:nunyabizness:/home/nunyabizness:/sbin/nologin spgarcia:x:549:549:Stephen P. Garcia:/home/spgarcia:/bin/tcsh gustave:x:550:550:Gustave von Verruckt:/home/gustave:/sbin/nologin emile:x:551:551:Emile Voyeur:/home/emile:/sbin/nologin rory:x:552:552:Rory Valet:/home/rory:/sbin/nologin daedalus:x:553:553:Daedalus:/home/daedalus:/sbin/nologin darwin:x:554:554:Darwin Charles:/home/darwin:/sbin/nologin candy:x:556:556:Candy Garcia:/home/candy:/sbin/nologin chris:x:557:557:Chris Garcia:/home/chris:/bin/tcsh gerwin:x:558:558:Gerwin Henn:/home/gerwin:/sbin/nologin ambrosine:x:559:559:Ambrosine:/home/ambrosine:/sbin/nologin cmc:x:560:560:Chris Calongne:/home/cmc:/sbin/nologin alstrans:x:561:561:ALS Transport:/home/alstrans:/sbin/nologin alslog:x:562:562:ALS Freight Management:/home/alslog:/sbin/nologin ccalongne:x:563:563:Chris M Calongne:/home/ccalongne:/sbin/nologin michaelc:x:564:564:C Michael Calongne:/home/michaelc:/sbin/nologin rharberson:x:565:565:Rocky Harberson:/home/rharberson:/sbin/nologin jlodato:x:566:566:Jim Lodato:/home/jlodato:/sbin/nologin ddaniels:x:567:567:David Daniels:/home/ddaniels:/sbin/nologin ajfortier:x:568:568:Al Fortier:/home/ajfortier:/sbin/nologin dispatch:x:569:569:Dispatch:/home/dispatch:/sbin/nologin snark123:x:570:570:Jay Garcia:/home/snark123:/bin/tcsh jgarcia:x:571:571:Jay Garcia:/home/jgarcia:/bin/tcsh mcpurdy:x:572:572:Martin Purdy:/home/mcpurdy:/sbin/nologin jdecota:x:573:573:Joan DeCota:/home/jdecota:/sbin/nologin tdecota:x:574:574:Thomas DeCota:/home/tdecota:/sbin/nologin sgarcia:x:576:576:Stephen P. Garcia:/home/sgarcia:/bin/tcsh mlgarcia:x:577:577:Mary Lou Garcia:/home/mlgarcia:/sbin/nologin jangoldfield:x:578:578:Jan Goldfield:/home/jangoldfield:/sbin/nologin ufaqadmin:x:580:580:ufaqadmin:/home/ufaqadmin:/sbin/nologin photos:x:581:581:photos:/home/photos:/sbin/nologin homedepot:x:584:584:homedepot:/home/homedepot:/sbin/nologin twilcox:x:585:585:T Wicox:/home/twilcox:/sbin/nologin rnmatt:x:586:586:rnmatt:/home/jay/www/netscapechampions.org:/sbin/nologin jay.garcia:x:588:588:Jay Garcia:/home/jay.garcia:/bin/tcsh root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin news:x:9:13:news:/etc/news: uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin gopher:x:13:30:gopher:/var/gopher:/sbin/nologin ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin nobody:x:99:99:Nobody:/:/sbin/nologin vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin popa3d:x:84:84::/dev/null:/dev/null rpm:x:37:37::/var/lib/rpm:/sbin/nologin pcap:x:77:77::/var/arpwatch:/sbin/nologin nscd:x:28:28:NSCD Daemon:/:/sbin/nologin mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin apache:x:48:48:Apache:/var/www:/sbin/nologin mailman:x:41:41:GNU Mailing List Manager:/usr/lib/mailman:/sbin/nologin webalizer:x:67:67:Webalizer:/var/www/usage:/sbin/nologin xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin webadmin:x:79:79:Web Administrator:/var/www/html:/sbin/nologin clamav:x:100:101:Clam Anti Virus Checker:/var/clamav:/sbin/nologin majordomo:x:102:2:Majordomo:/var/majordomo:/sbin/nologin postgres:x:103:106:Postgres:/home/postgres:/bin/bash postfix:x:89:89::/var/spool/postfix:/sbin/nologin mysql:x:104:107:MySQL server:/var/lib/mysql:/bin/bash named:x:25:25:Named:/var/named:/sbin/nologin dovecot:x:105:108:Dovecot IMAP server:/usr/libexec/dovecot:/sbin/nologin jaygarcia:x:500:500:Administrative User:/home/jaygarcia:/bin/sh candygarcia:x:501:501:Candy:/home/candygarcia:/sbin/nologin ufaq:x:503:503:ufaq:/home/ufaq:/bin/tcsh spam:x:504:504:spam:/home/spam:/sbin/nologin jay:x:505:505:Jay Garcia:/home/jay:/bin/sh ud:x:506:506:Uncle Duck:/home/ud:/sbin/nologin daffyduck:x:507:507:Daffy Duck:/home/daffyduck:/sbin/nologin doug:x:511:511:Doug Decota:/home/doug:/bin/tcsh webmaster:x:513:513:Jay Garcia:/home/webmaster:/sbin/nologin reg-ufaq:x:519:519:RegUFAQ:/home/reg-ufaq:/sbin/nologin out:x:520:520:Outgoing:/home/out:/sbin/nologin gumbo:x:521:521:Gumbo:/home/gumbo:/sbin/nologin goldfish:x:522:522:Sir Gold Fish:/home/goldfish:/sbin/nologin braidnboots:x:527:527:Tina Wilcox:/home/braidnboots:/sbin/nologin dvr:x:531:531:dvr:/home/dvr/www/dvr.jaygarcia.com/DVR:/sbin/nologin legal:x:535:535:Charmaigne M Landrieu:/home/legal:/sbin/nologin postmaster:x:538:538:postmaster:/home/postmaster:/sbin/nologin pondlady:x:539:539:Jan Goldfield:/home/pondlady:/sbin/nologin jan:x:540:540:Jan:/home/jan:/sbin/nologin dvr2:x:541:541:dvr2:/home/dvr/www/dvr.jaygarcia.com/DVR/DVR2:/sbin/nologin dvr3:x:542:542:dvr3:/home/dvr/www/dvr.jaygarcia.com/DVR/DVR3:/sbin/nologin dvr4:x:543:543:dvr4:/home/dvr/www/dvr.jaygarcia.com/DVR/DVR4:/sbin/nologin dvr5:x:544:544:dvr5:/home/dvr/www/dvr.jaygarcia.com/DVR/DVR5:/sbin/nologin dvr6:x:545:545:dvr6:/home/dvr/www/dvr.jaygarcia.com/DVR/DVR6:/sbin/nologin accordex:x:546:546:Accordex:/home/accordex:/sbin/nologin nunyabizness:x:548:548:nunyabizness:/home/nunyabizness:/sbin/nologin spgarcia:x:549:549:Stephen P. Garcia:/home/spgarcia:/bin/tcsh gustave:x:550:550:Gustave von Verruckt:/home/gustave:/sbin/nologin emile:x:551:551:Emile Voyeur:/home/emile:/sbin/nologin rory:x:552:552:Rory Valet:/home/rory:/sbin/nologin daedalus:x:553:553:Daedalus:/home/daedalus:/sbin/nologin darwin:x:554:554:Darwin Charles:/home/darwin:/sbin/nologin candy:x:556:556:Candy Garcia:/home/candy:/sbin/nologin chris:x:557:557:Chris Garcia:/home/chris:/bin/tcsh gerwin:x:558:558:Gerwin Henn:/home/gerwin:/sbin/nologin ambrosine:x:559:559:Ambrosine:/home/ambrosine:/sbin/nologin cmc:x:560:560:Chris Calongne:/home/cmc:/sbin/nologin alstrans:x:561:561:ALS Transport:/home/alstrans:/sbin/nologin alslog:x:562:562:ALS Freight Management:/home/alslog:/sbin/nologin ccalongne:x:563:563:Chris M Calongne:/home/ccalongne:/sbin/nologin michaelc:x:564:564:C Michael Calongne:/home/michaelc:/sbin/nologin rharberson:x:565:565:Rocky Harberson:/home/rharberson:/sbin/nologin jlodato:x:566:566:Jim Lodato:/home/jlodato:/sbin/nologin ddaniels:x:567:567:David Daniels:/home/ddaniels:/sbin/nologin ajfortier:x:568:568:Al Fortier:/home/ajfortier:/sbin/nologin dispatch:x:569:569:Dispatch:/home/dispatch:/sbin/nologin snark123:x:570:570:Jay Garcia:/home/snark123:/bin/tcsh jgarcia:x:571:571:Jay Garcia:/home/jgarcia:/bin/tcsh mcpurdy:x:572:572:Martin Purdy:/home/mcpurdy:/sbin/nologin jdecota:x:573:573:Joan DeCota:/home/jdecota:/sbin/nologin tdecota:x:574:574:Thomas DeCota:/home/tdecota:/sbin/nologin sgarcia:x:576:576:Stephen P. Garcia:/home/sgarcia:/bin/tcsh mlgarcia:x:577:577:Mary Lou Garcia:/home/mlgarcia:/sbin/nologin jangoldfield:x:578:578:Jan Goldfield:/home/jangoldfield:/sbin/nologin ufaqadmin:x:580:580:ufaqadmin:/home/ufaqadmin:/sbin/nologin photos:x:581:581:photos:/home/photos:/sbin/nologin homedepot:x:584:584:homedepot:/home/homedepot:/sbin/nologin twilcox:x:585:585:T Wicox:/home/twilcox:/sbin/nologin rnmatt:x:586:586:rnmatt:/home/jay/www/netscapechampions.org:/sbin/nologin jay.garcia:x:588:588:Jay Garcia:/home/jay.garcia:/bin/tcsh
Ghostery has found the following on this page:Amazon Associates