Hack Forums
Exploiting site with LFI(Local File Inclusion) to Upload shell Tutorial-By Spirit - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Exploiting site with LFI(Local File Inclusion) to Upload shell Tutorial-By Spirit (/showthread.php?tid=5356987)

Exploiting site with LFI(Local File Inclusion) to Upload shell Tutorial-By Spirit - spirited_wolf™ - Jul 30, 2016

Exploiting site with LFI(Local File Inclusion) to Upload shell Tutorial-By Spirit
Hello hackforum,
I am Spirited wolf and today we will discuss a little bit about lfi(local File Inclusion)

So, lets start 🤗

[b]VIDEO TUTORIAL



------------------------------------------------------------------------------------------------------------
This tutorial is for educational purpose only i am not responsible for any harm.
------------------------------------------------------------------------------------------------------------
Please do some practice 👍
-----------------------------------------------------------------------------------------------------------------------------------------------------
Thanks for watching guys and keep watching 🎉
Please Subscribe My Channel If you like it::🤝
www.youtube.com/c/Pentestingwithspirit

Please Like My Facebook Page::🤝
www.facebook.com/Pentestingwithspirit

Follow me on Twitter::🤝
@spirit3113[/b]


* - surelyenough - Jul 30, 2016

why am I seeing methods that have been documented the past 20 years as "new". pls stop. quality > quantity

* - spirited_wolf™ - Jul 30, 2016

(Jul 30, 2016 12:28 AM)surelyenough Wrote:  why am I seeing methods that have been documented the past 20 years as "new". pls stop. quality > quantity

brother this is beginners section 😊 so, i though many beginners don't know about this so i though it is right 😵

i really apologize if i have done wrong 😭

* - surelyenough - Jul 30, 2016

(Jul 30, 2016 12:38 AM)spirited_wolf Wrote:  brother this is beginners section 😊 so, i though many beginners don't know about this so i though it is right 😵

i really apologize if i have done wrong 😭
no it's cool, and it's good that you're contributing, but in my opinion you'll do better by exploring newer topics and attacks. People interested in LFI can search around and find hundreds of tutorials, video or text so I'm not seeing a lot of use in re-inventing the wheel

* - spirited_wolf™ - Jul 30, 2016

(Jul 30, 2016 12:57 AM)surelyenough Wrote:  no it's cool, and it's good that you're contributing, but in my opinion you'll do better by exploring newer topics and attacks. People interested in LFI can search around and find hundreds of tutorials, video or text so I'm not seeing a lot of use in re-inventing the wheel

oks brother please tell me about some new attacks 🙂

* - Ｅssence - Jul 30, 2016

Noice tutorial, someone used this on my site a couple days ago to add pictures to the site. I fixed it making it so it requires a password to upload to my site now, but you should try to do something to my site.

I need people that are good at exploiting vulnerabilities in websites and I'd like you to try to exploit my site. Nothing big, just see if you are able to somehow upload a php file to the site.

PM me for the site name, or just look at my user bar. Thanks

* - surelyenough - Jul 30, 2016

(Jul 30, 2016 01:50 AM)spirited_wolf Wrote:  oks brother please tell me about some new attacks 🙂
SSI in new platforms: IIS, Nginx but also Apache
CGI based attacks and httpd hooking techniques (ap_hook_handler, quick handles etc)
Object injections through magic PHP methods like __ToString(), but if you'd make a POP tutorial I'd be really impressed.
Other XML based code injection oddities like XSLTProcessor, crossdomain.xml and DOM based client attacks that exceed XSS.

* - spirited_wolf™ - Jul 30, 2016

(Jul 30, 2016 01:57 AM)Ｅssence Wrote:  PM me for the site name, or just look at my user bar. Thanks

sure i have got the site, i'll surely try🤝

(Jul 30, 2016 02:00 AM)surelyenough Wrote:  SSI in new platforms: IIS, Nginx but also Apache
CGI based attacks and httpd hooking techniques (ap_hook_handler, quick handles etc)
Object injections through magic PHP methods like __ToString(), but if you'd make a POP tutorial I'd be really impressed.
Other XML based code injection oddities like XSLTProcessor, crossdomain.xml and DOM based client attacks that exceed XSS.

thanks for telling me about these 🎉
i think i got a new homework 😈