+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Promising LFi with passwd - Stuck, how can I get around this? (/showthread.php?tid=3603468)
Promising LFi with passwd - Stuck, how can I get around this? - yarn - Jul 6, 2013
Greetings!
I did some practicing with LFi today and it took awhile for me to find my first random vulnerable site using Google dorks. I was able to get to the "/etc/passwd" file as the tutorials say. Here is the vulnerable site:
http://www.rouqia.com/index.php?var=divers_livredor&lg=../../../../etc/passwd%00
So when I try doing the next step of the tutorial by changing it to: "/proc/self/environ", the page does not appear with the phpinfo stuff (even with the %00 added to the end). I have my mozilla firefox user agent changed to <?php phpinfo(); ?> as the tutorial says.
(I am using this tutorial by the way: http://hackinto.me/tuts/LFI/ ).
So is this file missing, or have I reached a dead end? Is my user agent not configured properly? If there is a way, please let me know how you would go about this.
Thanks!
BUMP BUMP BUMP IT UP. HAM IT UP. Unhackable?