Username: 
Password: 
Restrict session to IP 

Half way  Go to the Training: PHP LFI challenge

Global Rank: 8584
Totalscore: 879
Postitused: 1
Aitäh: 0
Üleshääled: 0
Registreeritud: 12y 63d
Viimati nähtud: 11y 362d
Kasutaja on hetkel väljas
Half way
Google/translate0Aitäh!0Hea postitus!0Halb postitus! link
Hey there

I'm new to this all, but want to learn it all Smile

Now i'm strugeling with this challenge.

I'm half way (i think)
i can delete the suffix, because .html is not what a i need.
but i cant delete the prefix and again, pages/ is not what is need

But i really do not know how i can delete that prefix from beeing loading.


am i solving this in the good way or am i totally lost?
Global Rank: 253
Totalscore: 87266
Postitused: 1639
Aitäh: 1338
Üleshääled: 886
Registreeritud: 16y 73d




Viimati nähtud: 7h 49m
Kasutaja on hetkel väljas
RE: Half way
Google/translate0Aitäh!0Hea postitus!0Halb postitus! link
It sounds like you are on a good track.
You can walk up in the file system with "directory traversel".
Chopping off the .html is simulated because this got fixed in PHP, but the technique is obvious and well known.

Cheers \o
gizmore
The geeks shall inherit the properties and methods of object earth.
Redknee, ic3sn0w, tunelko, silenttrack, n0tHappy, quangntenemy, TheHiveMind, Z, balicocat, Ge0, samuraiblanco, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, JanLitwin17, SwolloW, dangarbri have subscribed to this thread and receive emails on new posts.
1 vaatavad hetkel seda teemat.
Seda teemat on vaadatud 14692 korda.