fuzzdb/attack/lfi/README.md

LFI - Local File Include attacks

To exploit an LFI bug, you need to be able to write code to a local file and call it from the include. HTTPD log files are a location that is typically writable. 

common-unix-httpd-log-locations.fuzz.txt 
* To exploit a lfi bug, you have to get code into a local file. This list contains a list of common unix logfile locations based on common packages formats. 

common-windows-httpd-log-locations.fuzz.txt
* To exploit a lfi bug, you have to get code into a local file. This list contains a list of common windows logfile locations based on common packages formats.

For more details:
* http://www.wtfchan.org/~evil1/Web-Shells-rev2.pdf

other tools:
* fimap https://tha-imax.de/git/root/fimap
doc relocation and renaming update 2015-09-11 23:39:11 +00:00			`LFI - Local File Include attacks`

			`To exploit an LFI bug, you need to be able to write code to a local file and call it from the include. HTTPD log files are a location that is typically writable.`

			`common-unix-httpd-log-locations.fuzz.txt`
Update README.md 2016-03-09 23:59:10 +00:00			`* To exploit a lfi bug, you have to get code into a local file. This list contains a list of common unix logfile locations based on common packages formats.`
doc relocation and renaming update 2015-09-11 23:39:11 +00:00
			`common-windows-httpd-log-locations.fuzz.txt`
Update README.md 2016-03-09 23:59:10 +00:00			`* To exploit a lfi bug, you have to get code into a local file. This list contains a list of common windows logfile locations based on common packages formats.`
doc relocation and renaming update 2015-09-11 23:39:11 +00:00
			`For more details:`
Update README.md 2016-03-09 23:59:10 +00:00			`* http://www.wtfchan.org/~evil1/Web-Shells-rev2.pdf`
doc relocation and renaming update 2015-09-11 23:39:11 +00:00
			`other tools:`
Update README.md 2016-08-15 00:35:00 +00:00			`* fimap https://tha-imax.de/git/root/fimap`
doc relocation and renaming update 2015-09-11 23:39:11 +00:00