Greetings!
I did some practicing with LFi today and it took awhile for me to find my first random vulnerable site using Google dorks. I was able to get to the "/etc/passwd" file as the tutorials say. Here is the vulnerable site:
http://www.rouqia.com/index.php?var=dive.../passwd%00
So when I try doing the next step of the tutorial by changing it to: "/proc/self/environ", the page does not appear with the phpinfo stuff (even with the %00 added to the end). I have my mozilla firefox user agent changed to <?php phpinfo(); ?> as the tutorial says.
(I am using this tutorial by the way: http://hackinto.me/tuts/LFI/ ).
So is this file missing, or have I reached a dead end? Is my user agent not configured properly? If there is a way, please let me know how you would go about this.
Thanks!
BUMP BUMP BUMP IT UP. HAM IT UP. Unhackable?
I did some practicing with LFi today and it took awhile for me to find my first random vulnerable site using Google dorks. I was able to get to the "/etc/passwd" file as the tutorials say. Here is the vulnerable site:
http://www.rouqia.com/index.php?var=dive.../passwd%00
So when I try doing the next step of the tutorial by changing it to: "/proc/self/environ", the page does not appear with the phpinfo stuff (even with the %00 added to the end). I have my mozilla firefox user agent changed to <?php phpinfo(); ?> as the tutorial says.
(I am using this tutorial by the way: http://hackinto.me/tuts/LFI/ ).
So is this file missing, or have I reached a dead end? Is my user agent not configured properly? If there is a way, please let me know how you would go about this.
Thanks!
BUMP BUMP BUMP IT UP. HAM IT UP. Unhackable?