File Inclusion Vulnerability Explained | TryHackMe Junior Penetration Tester | OSCP

In this video walk-through, We covered local and remote file inclusion vulnerability. We also explained methods of bypassing filters. This was part of TryHackMe Junior Penetration Tester pathway. This video is useful for OSCO certification prep.
*********
Receive Cyber Security Field, Certifications Notes and Special Training Videos
**********
Writeup
TryHackMe File Inclusion
**********
Store
Patreon
Instagram
Google Profile
LinkedIn
Instagram
Twitter
Facebook
**
0:00 - Introduction to File Inclusion Vulnerability
1:08 - Lab 1: Simple File Inclusion
3:17 - Lab 2: File Inclusion in the Includes Directory
6:48 - Lab 3: Bypassing Extensions with Null Bytes
9:58 - Lab 4: Function Vulnerabilities in File Inclusion
12:46 - Lab 6: Directory and File Path Manipulation
16:14 - Challenge 1: Capturing the First Flag
18:42 - Challenge 2: Bypassing Cookie Restrictions
23:22 - Challenge 3: Post Request File Inclusion
27:51 - Remote File Inclusion (RFI) Playground
31:01 - Gaining Remote Shell Access

[DeeMeltDown]

I somehow struggled my way through these challenges but didn't really feel like I understood the material. Your explanation was much better than the written material

[farhadturabi]

I wouldn't be able to do this task without this video. good explanation

[anonuser]

I really loved to study cybersecurity for the past month but after I got to this point i gave up convincing myself that i am too stupid for all of this since i couldnt understand a single word they wrote on the site but after coming across this video and reading the comments i decided i am going to try again, thank you

[justinnewberry]

Thank you for a thorough and concise tutorial. There is no way I could have completed that challenge without your help. Now I just need to do it another five times and I might be able to remember how to do this! Keep up the GREAT work!

[av]

This room was the first room where i started getting problems. Thanks for this tutorial.

[uscmhudson]

Well done, much better explanations than the provided material. I really think they need to revise or flesh out some of these labs, for example some of the tools that may be helpful such as burp suite aren't covered until later in the path. I ran into a similar issue when they were talking about decoding sha, md5, and base64, they gave you a link to help you with the later but not the base64, later in the path they provided a link. Funny enough it was the one I just happened upon to complete the lab.

[edgeofthegrasstactics]

This really helped me sir ! But I must say that this is a liitle too advanced for beginners.

[lphV]

The only video you need to understand whole file inclusion concept!!
Thank you so much for this. ❤❤

[alexandrosmitsouli]

nice work on this one, really cleared up my mind. Thanks keep it up

[AhmedMohamed-knsf]

انا لقيت اسمك عربي فسمحلي اكتب بالعربي
فبجد مجهود رائع وشرح سهل ومبسط
كمان اخر جزء في الفيديو كان رهيب. حقيقي فخور ان في مسلمين بالمهارة دي. اتمنى أوصل لمستوى حضرتك.

[jeitzi]

thanks man! tried the challenges by myself for a while but had no chance. with your help I completed it while still learning a lot.

[FrugalThinkin]

love the videos man - so informative and plenty of time to pause and try out yourself out without blurting out the answers

[jodokast]

Thank you for this walkthrough! I could not wrap my head around this room. So much help!

[rbrookes]

This helped so much even after I'd read the written write up.

[tonyYoutube]

thank you for activating the subtitles, it gives us the possibility to put the translation in French

[Adam-kodx]

Thanks very much, the written tutorial for this was not particularly helpful but this is much better.

[worldbuilder]

thank you so much for this. This walk through is so much better then the room. And i was able to follow along as a mid level cyber learner. 💕

[TheSpecialist]

thanks for the help brother. I didn't just want the answers so I'm happy I came across your channel so I could actually learn step by step. that made much more sense then the verbage they had.

[N_NMz]

Thank you! Challenge 3 was whooping my a** and this helped me through. Great explanation good sir!

[xpwnstar]

I thought it was well done! the best break down I've seen out here. I'm glad to have subscribed and will check out the rest of the vids. Keeo up the great work!