Jul 30, 2016 12:11 AM (This post was last modified: Jul 30, 2016 12:12 AM by spirited_wolf™.)
Exploiting site with LFI(Local File Inclusion) to Upload shell Tutorial-By Spirit
Hello hackforum,
I am Spirited wolf and today we will discuss a little bit about lfi(local File Inclusion)
So, lets start 🤗
[b]VIDEO TUTORIAL
------------------------------------------------------------------------------------------------------------
This tutorial is for educational purpose only i am not responsible for any harm.
------------------------------------------------------------------------------------------------------------
Please do some practice 👍
-----------------------------------------------------------------------------------------------------------------------------------------------------
Thanks for watching guys and keep watching 🎉
Please Subscribe My Channel If you like it::🤝 www.youtube.com/c/Pentestingwithspirit
(Jul 30, 2016 12:38 AM)spirited_wolf™ Wrote: brother this is beginners section 😊 so, i though many beginners don't know about this so i though it is right 😵
i really apologize if i have done wrong 😭
no it's cool, and it's good that you're contributing, but in my opinion you'll do better by exploring newer topics and attacks. People interested in LFI can search around and find hundreds of tutorials, video or text so I'm not seeing a lot of use in re-inventing the wheel
(Jul 30, 2016 12:57 AM)surelyenough Wrote: no it's cool, and it's good that you're contributing, but in my opinion you'll do better by exploring newer topics and attacks. People interested in LFI can search around and find hundreds of tutorials, video or text so I'm not seeing a lot of use in re-inventing the wheel
oks brother please tell me about some new attacks 🙂
Noice tutorial, someone used this on my site a couple days ago to add pictures to the site. I fixed it making it so it requires a password to upload to my site now, but you should try to do something to my site.
I need people that are good at exploiting vulnerabilities in websites and I'd like you to try to exploit my site. Nothing big, just see if you are able to somehow upload a php file to the site.
PM me for the site name, or just look at my user bar. Thanks
Jul 30, 2016 02:00 AM (This post was last modified: Jul 30, 2016 02:01 AM by surelyenough.)
(Jul 30, 2016 01:50 AM)spirited_wolf™ Wrote: oks brother please tell me about some new attacks 🙂
SSI in new platforms: IIS, Nginx but also Apache
CGI based attacks and httpd hooking techniques (ap_hook_handler, quick handles etc)
Object injections through magic PHP methods like __ToString(), but if you'd make a POP tutorial I'd be really impressed.
Other XML based code injection oddities like XSLTProcessor, crossdomain.xml and DOM based client attacks that exceed XSS.
Jul 30, 2016 02:03 AM (This post was last modified: Jul 30, 2016 02:04 AM by spirited_wolf™.)
(Jul 30, 2016 01:57 AM)Ｅssence Wrote: PM me for the site name, or just look at my user bar. Thanks
sure i have got the site, i'll surely try🤝
(Jul 30, 2016 02:00 AM)surelyenough Wrote: SSI in new platforms: IIS, Nginx but also Apache
CGI based attacks and httpd hooking techniques (ap_hook_handler, quick handles etc)
Object injections through magic PHP methods like __ToString(), but if you'd make a POP tutorial I'd be really impressed.
Other XML based code injection oddities like XSLTProcessor, crossdomain.xml and DOM based client attacks that exceed XSS.
thanks for telling me about these 🎉
i think i got a new homework 😈
