From ac10681235eb8dc4d3f45ee73842b52e708b0010 Mon Sep 17 00:00:00 2001 From: Arall Date: Tue, 19 Dec 2023 18:18:56 +0100 Subject: [PATCH] Update lfi2rce-via-phpinfo.md Fix a 404 on the phpInfoLFI.py exploit link --- pentesting-web/file-inclusion/lfi2rce-via-phpinfo.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pentesting-web/file-inclusion/lfi2rce-via-phpinfo.md b/pentesting-web/file-inclusion/lfi2rce-via-phpinfo.md index 80a9403a7..c1f5babe7 100644 --- a/pentesting-web/file-inclusion/lfi2rce-via-phpinfo.md +++ b/pentesting-web/file-inclusion/lfi2rce-via-phpinfo.md @@ -19,7 +19,7 @@ To exploit this vulnerability you need: **A LFI vulnerability, a page where phpinfo() is displayed, "file\_uploads = on" and the server has to be able to write in the "/tmp" directory.** -[https://raw.githubusercontent.com/swisskyrepo/PayloadsAllTheThings/master/File%20Inclusion/phpinfolfi.py](https://raw.githubusercontent.com/swisskyrepo/PayloadsAllTheThings/master/File%20Inclusion/phpinfolfi.py) +[https://www.insomniasec.com/downloads/publications/phpinfolfi.py](https://www.insomniasec.com/downloads/publications/phpinfolfi.py) **Tutorial HTB**: [https://www.youtube.com/watch?v=rs4zEwONzzk\&t=600s](https://www.youtube.com/watch?v=rs4zEwONzzk\&t=600s)