Lfi

Compromised the ZeroTrace machine by discovering a hidden .admin directory and exploiting LFI to enumerate /proc …

Compromised the NorthWing machine by exploiting Local File Inclusion with a PHP filter wrapper, recovering and cracking …

Compromised the Care machine by exploiting a Local File Inclusion vulnerability to poison Squid proxy logs and achieve …

Covers source code disclosure, directory discovery, cookie tampering, LFI, encoding, and command injection.

Exploited LFI to retrieve an encrypted SSH key, cracked its passphrase, gained SSH access, and escalated privileges via …

Exploited an LFI vulnerability to poison Apache logs, gained a reverse shell, abused sudo permissions, cracked a GPG …