I found the endpoint, but I can’t read the txt file. Is http protocal not suitable for it?
my payload
<iframe src=http://127.0.0.1:8080/users/adminkey.txt width=1000 height=2000></iframe>
Okk , I just figured out how to get the benefits of this endpoint.
use “file” protocol to read the files via LFI vulnerability.
good luck 
1 Like
you’re the best bro thank you so much!
Hi can you please explain the step here
hi, can you explain how did you found this file, please?