+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [Help] Upload Temporary File Execution (/showthread.php?tid=4054018)
[Help] Upload Temporary File Execution - dst - Feb 11, 2014
Edit:
Hey guys,
I have an url : http://thewebsite.com/index.php?page=<inject here>
It's a LFI injection with NULL Byte %00 at the end.
For example:
http://thewebsite.com/index.php?page=/www/upload.php%00
Output >> the form has been display.
I read that when you upload a file to server, the server store it into a tmp directory which is /www/tmp/
But i'm not allowed to upload .php file and I have already tried these types of injections.
Can I run a script file which is located in /www/tmp ?
Have you any idea, not the solution ?
Thanks
* - mindfork - Feb 11, 2014
I read this like 5 times now still don't get what you're trying to say. You should fix your english if you want to get help.
* - Teferi - Feb 11, 2014
(Feb 11, 2014 11:08 AM)mindfork Wrote: I read this like 5 times now still don't get what you're trying to say. You should fix your english if you want to get help.
Peanuts, definitely something about peanuts.