From 83f7c51f018f1f40bfdca90f5a4a446715f3fb41 Mon Sep 17 00:00:00 2001 From: Adam Muntner Date: Wed, 9 Mar 2016 18:59:10 -0500 Subject: [PATCH] Update README.md --- attack/lfi/README.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/attack/lfi/README.md b/attack/lfi/README.md index 87fc4ea..841bbd5 100644 --- a/attack/lfi/README.md +++ b/attack/lfi/README.md @@ -3,15 +3,15 @@ LFI - Local File Include attacks To exploit an LFI bug, you need to be able to write code to a local file and call it from the include. HTTPD log files are a location that is typically writable. common-unix-httpd-log-locations.fuzz.txt -# To exploit a lfi bug, you have to get code into a local file. This list contains a list of common unix logfile locations based on common packages formats. +* To exploit a lfi bug, you have to get code into a local file. This list contains a list of common unix logfile locations based on common packages formats. common-windows-httpd-log-locations.fuzz.txt -# To exploit a lfi bug, you have to get code into a local file. This list contains a list of common windows logfile locations based on common packages formats. +* To exploit a lfi bug, you have to get code into a local file. This list contains a list of common windows logfile locations based on common packages formats. For more details: -http://www.wtfchan.org/~evil1/Web-Shells-rev2.pdf +* http://www.wtfchan.org/~evil1/Web-Shells-rev2.pdf other tools: -fimap http://code.google.com/p/fimap/ +* fimap http://code.google.com/p/fimap/