RE: Need LFI sites 08-08-2015, 04:42 AM
#4
Well now am attempting lfi challenge on securityoverride.org forum
In that challenge i saw this :->
page=Home => become Home.php
page=/challenge/advanced/uploads/an.jpg become ==> page=/challenge/advanced/uploads/an.jpg.php
Mean anything i put as input it become .php
How to bypass this? Any suggestion is welcome Thanks
Even i tried this :->
But it again become
challenges/advanced/uploads/An.jpg.php cannot be found.
In that challenge i saw this :->
page=Home => become Home.php
page=/challenge/advanced/uploads/an.jpg become ==> page=/challenge/advanced/uploads/an.jpg.php
Mean anything i put as input it become .php
How to bypass this? Any suggestion is welcome Thanks
Even i tried this :->
Code:
page=challenges/advanced/uploads/An.jpg../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../But it again become
challenges/advanced/uploads/An.jpg.php cannot be found.
(This post was last modified: 08-08-2015, 04:59 AM by D@rk1433.)
![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)
