Nome Utente: 
Password : 
Restringi sessione all'IP 
Online in 1gg

Half way  Vai alla sfida "Training: PHP LFI"

Posizione globale: 9092
Punteggio totale: 882
Posts : 1
Grazie: 0
Voti+: 0
Registrato: 14a 250gg
Ultima visita: 14a 183gg
L'utente è Offline
Half way
Google/traduci0Grazie!0Bel post!0Brutto post! Link
Hey there

I'm new to this all, but want to learn it all Smile

Now i'm strugeling with this challenge.

I'm half way (i think)
i can delete the suffix, because .html is not what a i need.
but i cant delete the prefix and again, pages/ is not what is need

But i really do not know how i can delete that prefix from beeing loading.


am i solving this in the good way or am i totally lost?
Posizione globale: 198
Punteggio totale: 110647
Posts : 1795
Grazie: 1390
Voti+: 961
Registrato: 18a 259gg




Ultima visita: 65gg 13ore
L'utente è Offline
RE: Half way
Google/traduci0Grazie!0Bel post!0Brutto post! Link
It sounds like you are on a good track.
You can walk up in the file system with "directory traversel".
Chopping off the .html is simulated because this got fixed in PHP, but the technique is obvious and well known.

Cheers \o
gizmore
The geeks shall inherit the properties and methods of object earth.
Redknee, ic3sn0w, silenttrack, n0tHappy, nonfungiblesecurity, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq utenti hanno sottoscritto il thread e ricevo le E-Mail di notifica.
1 persone stanno visualizzando il thread.
Questo thread è stato visualizzato 15891 volte.

PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6


Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.