Login Register
πŸŽ‚ Happy 14th Birthday Sinisterly!
The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


Need LFI sites filter_list
Author
Message
D@rk1433 Offline
Banned
Eleven Years of Service
Posts: 29
Threads: 12
Currency: 0 SP
Need LFI sites 08-08-2015, 03:15 AM #1
Hello experts. I learned the concept of LFI. Now i want to practice lfi on live sites. I used this dork :-> inurl: index.php?page=

And got many sites but none are vulnerable to this lfi.

Please provide me some lfi sites to practice and also need dorks.
Thanks in advance

Reply

Oni Online
鬼に金棒
 ********
Administrator
Fourteen Years of Service
Posts: 18,866
Threads: 2,029
Currency: 0 SP
StaffNight OwlAmericanBirthdayReputableIlluminatiHammerSuper Sinisterly
RE: Need LFI sites 08-08-2015, 03:38 AM #2
What made you decide to use that dork? Tongue

Spoiler:
You need to get another dork or discover an actual LFI. That one seems like an example.
[Image: 7ajmN5P.jpg]

Telegram: Oni_SL (Link)

Website
Reply

Dyme Offline
"#1 rapper on sl"
Thirteen Years of Service
Posts: 954
Threads: 26
Currency: 0 SP
GoldStoner
RE: Need LFI sites 08-08-2015, 04:15 AM #3
hey boss guess what YOU ARE THE DORK

Just setup a VM and practice you don't have to use randos.

[+] 1 user Likes Dyme's post
Reply

D@rk1433 Offline
Banned
Eleven Years of Service
Posts: 29
Threads: 12
Currency: 0 SP
RE: Need LFI sites 08-08-2015, 04:42 AM #4
Well now am attempting lfi challenge on securityoverride.org forum
In that challenge i saw this :->
page=Home => become Home.php
page=/challenge/advanced/uploads/an.jpg become ==> page=/challenge/advanced/uploads/an.jpg.php

Mean anything i put as input it become .php

How to bypass this? Any suggestion is welcome Thanks
Even i tried this :->

Code:
page=challenges/advanced/uploads/An.jpg../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../

But it again become

challenges/advanced/uploads/An.jpg.php cannot be found.
(This post was last modified: 08-08-2015, 04:59 AM by D@rk1433.)

Reply

roger_smith Offline
Resident Linux Pimp
 *******
Registered (Diamond)
Twelve Years of Service
Posts: 1,635
Threads: 147
Reputation: 98
Currency: 0 SP
StaffTech SavvyNight OwlAgelessOver 9000LegendaryGold
RE: Need LFI sites 08-08-2015, 05:20 AM #5
do you understand what the ../ represents?
---
Click here to get started with Linux!

If I helped you, please +rep me, apparently we've started over on Rep and I'd like to break 100 again...

Inori Wrote: got clickbaited by roger

[+] 1 user Likes roger_smith's post
Reply

D@rk1433 Offline
Banned
Eleven Years of Service
Posts: 29
Threads: 12
Currency: 0 SP
RE: Need LFI sites 08-08-2015, 05:37 AM #6
(08-08-2015, 05:20 AM)roger_smith Wrote: do you understand what the ../ represents?

Yes => Directory

In linux :->
cd /
cd var/www
cd .. ===> cd /var

[+] 1 user Likes D@rk1433's post
Reply







Users browsing this thread: 1 Guest(s)