+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: Introductions (https://sinister.ly/Forum-Introductions)
+--- Thread: Hi from a n00b hack chick (/Thread-Hi-from-a-n00b-hack-chick)
RE: Hi from a n00b hack chick - vikler - 07-23-2013
thanksssss everyone
Already browsing around, and like it!
RE: Hi from a n00b hack chick - vikler - 07-23-2013
thanksssss everyone
Already browsing around, and like it!
RE: Hi from a n00b hack chick - vikler - 07-28-2013
Any LFI experts over here?
I seem to be a bit os "stuck"
RE: Hi from a n00b hack chick - chmod - 07-28-2013
Try *THIS* or *THIS* these should help you out if not start a thread in the tutorial requests section with any specific questions you may have.
RE: Hi from a n00b hack chick - noize - 07-28-2013
What's the matter exactly? If you need a general idea (this means you have none) about LFI just look at the threads Chmod provided. Or you might post a specific question.
RE: Hi from a n00b hack chick - vikler - 07-28-2013
(07-28-2013, 08:56 AM)noize Wrote: What's the matter exactly? If you need a general idea (this means you have none) about LFI just look at the threads Chmod provided. Or you might post a specific question.the problem is that /proc/self/environ is not accesible although I can access /proc/self/fd/N where N is from 1 to 9
In /proc/self/fd/1 I found an info where Tomcat's log is stored. But it's not the usual log file that has user-agent info, so I don't even know how to poison it to inject the shell:Embarrassed: very weird site
RE: Hi from a n00b hack chick - noize - 07-28-2013
(07-28-2013, 09:12 AM)vikler Wrote:(07-28-2013, 08:56 AM)noize Wrote: What's the matter exactly? If you need a general idea (this means you have none) about LFI just look at the threads Chmod provided. Or you might post a specific question.the problem is that /proc/self/environ is not accesible although I can access /proc/self/fd/N where N is from 1 to 9
In /proc/self/fd/1 I found an info where Tomcat's log is stored. But it's not the usual log file that has user-agent info, so I don't even know how to poison it to inject the shell:Embarrassed: very weird site
I think you should make a new thread. Remember that the more details you give the easierly people will be able to help you. Though, if you're not trying this on your own ware (let's not tell bullshit), remember not to mention vulnerable websites, stay general: this is an ethical hacking forum. You don't tell, we don't ask.
Also, I can't get very well your point, so, if you made a thread with more details and maybe with a specific question as well, I'll see what I can do to answer.