+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Found a Big LFI vulnerable Website ( Well i thinK) (/showthread.php?tid=3064348)
Found a Big LFI vulnerable Website ( Well i thinK) - EMPIRERAIDER - Dec 2, 2012
look at this: http://naturalhistory.uga.edu/index.php.
If this LFI vulnerable Website feel free to Deface it if you want i do not care since we are a community.
Please do not flame if i am wrong guys
* - Illicit - Dec 2, 2012
1.It isnt vulnerable
2.It's not that big
Look at number 1, all vulnerabilities come with user input.On the page specified there is not user input except for the odd search bar.
* - EMPIRERAIDER - Dec 2, 2012
Thanks man for not being a Flame and thanks for telling me
* - Illicit - Dec 2, 2012
(Dec 2, 2012 05:20 AM)EMPIRERAIDER Wrote: Thanks man for not being a Flame and thanks for telling me
Why would I flame braw? :P I remember K'0D & CyberSec well :P
* - EMPIRERAIDER - Dec 2, 2012
Yes me too i remeber that it was one of the best in my opinion
* - Illicit - Dec 2, 2012
My bad that is vulnerable ! Why didnt you include the input >:
* - EMPIRERAIDER - Dec 2, 2012
Okay you deface it man you are my friend so take it
* - SIM-974023 - Dec 2, 2012
Anyone experienced in LFI give this a go.
* - EMPIRERAIDER - Dec 2, 2012
Yep i agree people i am more experiecned in RFI
* - benzi - Dec 2, 2012
its vuln to lfi,but magic quotes is on,so you can use null byte to ignore the .php
Code
http://naturalhistory.uga.edu/index.php?page='https://hackforums.net/showthread.php?tid=2189770
* - EMPIRERAIDER - Dec 2, 2012
thanks man you are a HQ member.
Hate 35 char limit
The problem is that i did not understand that not to be bad and besides i am not very good with LFI please some one help me.