Lfi

Compromised the Care machine by exploiting a Local File Inclusion vulnerability to poison Squid proxy logs and achieve …

Covers source code disclosure, directory discovery, cookie tampering, LFI, encoding, and command injection.

Exploited LFI to retrieve an encrypted SSH key, cracked its passphrase, gained SSH access, and escalated privileges via …

Exploited an LFI vulnerability to poison Apache logs, gained a reverse shell, abused sudo permissions, cracked a GPG …