+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: do you know same file inclusion challange?? (/showthread.php?tid=6220073)
do you know same file inclusion challange?? - kocmonobtDark - Sep 6, 2022
Hi guys , i learned how to do LFI ,RFI attack , i use my lab DVWA and i solved all the level , but i need more challenge in this topic , if you know any CTF or any labs to practice only file inclusion ??
tanks a lot for anything.... , love you
RE: do you know same file inclusion challange?? - f1re_w1re - Sep 7, 2022
Lmao RFI?? That shit has been dead for like 8 years now. You rarely find LFI today in the wild. But if you want some practice, I created my own boot 2 root VM. You can find it on VulnHub:
https://www.vulnhub.com/entry/the-ether-evilscience-v101,212/
Others have solved it, so if you hit a wall, a Google search can help you out.
Good luck and have fun with it!
RE: do you know same file inclusion challange?? - Money- - Sep 10, 2022
(Sep 7, 2022 10:16 PM)f1re_w1re Wrote: Lmao RFI?? That shit has been dead for like 8 years now. You rarely find LFI today in the wild. But if you want some practice, I created my own boot 2 root VM. You can find it on VulnHub:
https://www.vulnhub.com/entry/the-ether-evilscience-v101,212/
Others have solved it, so if you hit a wall, a Google search can help you out.
Good luck and have fun with it!
You can still find it. But its not those common places now like you see in the lab. You gotta fuzz endpoints and those people who rarely tested before.
Mostly Bug Bounty Methodology will help out. Have a look at hacker one live or public recent reports. I am sure LFI is still can be found in the while just different places.
RE: do you know same file inclusion challange?? - Mr. Robot - Sep 17, 2022
(Sep 7, 2022 10:16 PM)f1re_w1re Wrote: Lmao RFI?? That shit has been dead for like 8 years now. You rarely find LFI today in the wild. But if you want some practice, I created my own boot 2 root VM. You can find it on VulnHub:
https://www.vulnhub.com/entry/the-ether-evilscience-v101,212/
Others have solved it, so if you hit a wall, a Google search can help you out.
Good luck and have fun with it!
This is a dumb comment, I find these daily on websites that get 400k monthly visitors.
Also not just that - but a lot of the time you wont have full shell access so LFI based shells are the way to go.