+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: Need LFI sites (/Thread-Need-LFI-sites)
Need LFI sites - D@rk1433 - 08-08-2015
Hello experts. I learned the concept of LFI. Now i want to practice lfi on live sites. I used this dork :-> inurl: index.php?page=
And got many sites but none are vulnerable to this lfi.
Please provide me some lfi sites to practice and also need dorks.
Thanks in advance
RE: Need LFI sites - Oni - 08-08-2015
What made you decide to use that dork?
Spoiler:
You need to get another dork or discover an actual LFI. That one seems like an example.
RE: Need LFI sites - Dyme - 08-08-2015
hey boss guess what YOU ARE THE DORK
Just setup a VM and practice you don't have to use randos.
RE: Need LFI sites - D@rk1433 - 08-08-2015
Well now am attempting lfi challenge on securityoverride.org forum
In that challenge i saw this :->
page=Home => become Home.php
page=/challenge/advanced/uploads/an.jpg become ==> page=/challenge/advanced/uploads/an.jpg.php
Mean anything i put as input it become .php
How to bypass this? Any suggestion is welcome Thanks
Even i tried this :->
Code:
page=challenges/advanced/uploads/An.jpg../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../But it again become
challenges/advanced/uploads/An.jpg.php cannot be found.
RE: Need LFI sites - roger_smith - 08-08-2015
do you understand what the ../ represents?
RE: Need LFI sites - D@rk1433 - 08-08-2015
(08-08-2015, 05:20 AM)roger_smith Wrote: do you understand what the ../ represents?
Yes => Directory
In linux :->
cd /
cd var/www
cd .. ===> cd /var