Statistics

73485 Users

52 Donations

Top 10 Players

Last 20 Activities

Online within 1d

WeChall->Challenges->Challenge: Training: PHP LFI

Half way Go to the Training: PHP LFI challenge

This page seems to have been hacked.How to remove the .html?

cheeta

Global Rank: 9092

Totalscore: 882

Posts: 1

Thanks: 0

UpVotes: 0

Registered: 14y 249d

Last Seen: 14y 183d

The User is Offline

Half way
Apr 23, 2012 - 23:54:44 (14y 193d) Google/translate0Thank You!0Good Post!0Bad Post! link

Hey there

I'm new to this all, but want to learn it all Smile

Now i'm strugeling with this challenge.

I'm half way (i think)
i can delete the suffix, because .html is not what a i need.
but i cant delete the prefix and again, pages/ is not what is need

But i really do not know how i can delete that prefix from beeing loading.

am i solving this in the good way or am i totally lost?

gizmore

Global Rank: 198

Totalscore: 110647

Posts: 1795

Thanks: 1390

UpVotes: 961

Registered: 18y 259d

Last Seen: 65d 2h

The User is Offline

Send EMail to gizmore

RE: Half way
Apr 24, 2012 - 09:19:04 (14y 192d) Google/translate0Thank You!0Good Post!0Bad Post! link

It sounds like you are on a good track.
You can walk up in the file system with "directory traversel".
Chopping off the .html is simulated because this got fixed in PHP, but the technique is obvious and well known.

Cheers \o
gizmore

The geeks shall inherit the properties and methods of object earth.

Redknee, ic3sn0w, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 15890 times.