Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Found a Big LFI vulnerable Website ( Well i thinK)

look at this: http://naturalhistory.uga.edu/index.php.

If this LFI vulnerable Website feel free to Deface it if you want i do not care since we are a community.

Please do not flame if i am wrong guys
1.It isnt vulnerable
2.It's not that big

Look at number 1, all vulnerabilities come with user input.On the page specified there is not user input except for the odd search bar.
Thanks man for not being a Flame and thanks for telling me
(Dec 2, 2012 05:20 AM)EMPIRERAIDER Wrote:  Thanks man for not being a Flame and thanks for telling me

Why would I flame braw? :P I remember K'0D & CyberSec well :P
Yes me too i remeber that it was one of the best in my opinion
My bad that is vulnerable ! Why didnt you include the input >:
Okay you deface it man you are my friend so take it
Anyone experienced in LFI give this a go.
Yep i agree people i am more experiecned in RFI
its vuln to lfi,but magic quotes is on,so you can use null byte to ignore the .php
Code
http://naturalhistory.uga.edu/index.php?page='
follow this tut-
https://hackforums.net/showthread.php?tid=2189770
if you cant find somethin to live for, you best find somethin to die for.
thanks man you are a HQ member.

Hate 35 char limit

The problem is that i did not understand that not to be bad and besides i am not very good with LFI please some one help me.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by shadowpigJul 5, 2019 07:25 AM 0 165 Jul 5, 2019 07:25 AM
Last Post: shadowpig
by CryptoLayerJan 22, 2018 08:10 PM 0 122 Jan 22, 2018 08:10 PM
Last Post: CryptoLayer
by -DownFallAug 3, 2017 11:14 PM 12 2,085 Aug 3, 2017 11:14 PM
Last Post: Nyctos