Local File Inclusion For Beginners | LFI | TryHackMe | Part 1

In this video we will cover Local File Inclusion (LFI) using a beginners tryhackme room. We will view contents of /etc/passwd, find a ssh key and gain user access to the system then escalate our privilege with GTFObins.

Enjoy and hopefully you can add LFI to your bug bounty methodology !

___________________________________________________________________________

If you enjoyed this video smash the like button, leave a comment and sub to the channel. Let me know what you like or any ideas you may want to see on my channel :)

___________________________________________________________________________
Make sure to subscribe for more hacking tutorials!
___________________________________________________________________________

Connect with me:

[anotheruniquehandle]

lol what the hell. the id_rsa I made said wrong format as well, but it gave me a password prompt??? I just found the user flag and the root flag through the URL parameter stuff, because I saw you could read the etc/shadow file I figured you have root privileges already.

SPOILER URL PARAMETERS:
root flag is at: page=../../root/root.txt
user flag is at:

[ajetunmobiadam]

please how were you able to write the "!" I am finding it hard to write that