Restrict session to IP 

Half way  Go to the Training: PHP LFI challenge

Global Rank: 8674
Totalscore: 879
Posts: 1
Thanks: 0
UpVotes: 0
Registered: 12y 141d
Last Seen: 12y 75d
The User is Offline
Half way
Google/translate0Thank You!0Good Post!0Bad Post! link
Hey there

I'm new to this all, but want to learn it all Smile

Now i'm strugeling with this challenge.

I'm half way (i think)
i can delete the suffix, because .html is not what a i need.
but i cant delete the prefix and again, pages/ is not what is need

But i really do not know how i can delete that prefix from beeing loading.

am i solving this in the good way or am i totally lost?
Global Rank: 251
Totalscore: 87244
Posts: 1647
Thanks: 1344
UpVotes: 896
Registered: 16y 151d

Last Seen: 12m 36s
The User is Offline
RE: Half way
Google/translate0Thank You!0Good Post!0Bad Post! link
It sounds like you are on a good track.
You can walk up in the file system with "directory traversel".
Chopping off the .html is simulated because this got fixed in PHP, but the technique is obvious and well known.

Cheers \o
The geeks shall inherit the properties and methods of object earth.
Redknee, ic3sn0w, tunelko, silenttrack, n0tHappy, quangntenemy, TheHiveMind, Z, balicocat, Ge0, samuraiblanco, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, SwolloW, dangarbri, kalungmas have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 14827 times.