Lfi

Covers source code disclosure, directory discovery, cookie tampering, LFI, encoding, and command injection.

Exploited LFI to retrieve an encrypted SSH key, cracked its passphrase, gained SSH access, and escalated privileges via …

Exploited an LFI vulnerability to poison Apache logs, gained a reverse shell, abused sudo permissions, cracked a GPG …