LFI Exploitation via /proc/self/fd

preview_player
Показать описание
Рекомендации по теме
Комментарии
Автор

Expanded my LFI knowledge
Very detailed and very well explained
Thanks for the tut bro
Keep it up!

zerofreaktutorials
Автор

Thanks mate, helpful up to this day :)

FatalHacktality
Автор

sometimes you just have to inject blindly and run with it. You can take the general concept of blind injections in general and apply them to these cases. If the page is getting included then code should also be executed, whether or not you see it physically (i.e. the server has already executed it, you just having problem rendering it) since PHP executed server side.

HooddRobn
Автор

haha, man, those censor boxes at 17:10 did not really do their job eh?

NgoKimPhu
Автор

when log file is too large, neither Burp nor firefox is able to open the whole file, so last lines will not be displayed and injected command will not be executed unfortunately. Is there any solution to solve this problem ?!

mohammedalisrawi
Автор

sometimes the logs are too large and result in errors due to insufficient memory, not much you can do about that one but look for another link you can use. You can find the collection of common files for fuzzing here:

HooddRobn