Academy help LFI final assessment

Tutorials Other
1

Hi guys, I have got to the part where i have the index source code, i can see that is filtering ** and appending .php. Its php 7+, so null byte is out of question. Tried adding slashes and dots at the end to get it truncated, didnt work.
end up with either php wrappers or RFI. I have tried all the wrappers i could find but no luck, tried ftp, http, zip, input, data, exept etc… any suggestions or hints that can put me on right track?

Thanks

2

Whoops…I have the same questions, not solved, did you solve? If solved,tell me thanks@rezarz77

3

Not yet mate, it’s just driving me mad!

4

Me too, I have spent more than 3 hours on it…A little bit mad.

5

Its all good, thanks to everyone who helped :))

6

Its all good, thanks to everyone who helped :))

7

Mate have you cracked this ? Am exactly where you were. This ones a bit tricky ain it ?

8

@rezarz77 & @BenchDing Could you guys help me out on this? I’m stuck at the same point, can’t figure it out.
Thanks

9

Hi everyone, I’m having the same issue as you, I tried every single thing that was taught in the course/path and I didn’t get anything, if anyone solved it please send it here, thxx!

10

I’m also struggling, I found the ?message= and ?page= but going nowhere…

11

Hi folks,

struggling here too. I got the source code from index.php with the last few lines showing the php-code. I realize that entering some not allowed inputs redirects you to the error page. Also found the admin-panel but it seems useless (isn’t it?).

But i can’t figure out how to make my way to the root (/) directory. Any further clue that doesn’t directly solve this thing?

Thx

12

Hey all,
Need a nudge in the right direction. Got the source code and panel info. I have tried the wrappers in the page= and log= areas and stuck on getting to the root dir for flag. Any help in right direction would be great!

Thanks

13

Type your comment> @3xpl0r3r said:

Hi folks,

struggling here too. I got the source code from index.php with the last few lines showing the php-code. I realize that entering some not allowed inputs redirects you to the error page. Also found the admin-panel but it seems useless (isn’t it?).

But i can’t figure out how to make my way to the root (/) directory. Any further clue that doesn’t directly solve this thing?

Thx

Same here, managed to get the passwd file content, but stuck. Any hint would be helpful.
Thx

14

Absolutely ditto. I am so glad I found this little chat. Thought I was going MAD! Would appreciate a DM.