I’m stuck for a while at the final assessment LFI/RFI
I’ve managed to get the source code of index
Got to the page where I can issue LFI to /etc/hosts file for example, but stuck here.
Any help would be appreciated
Thx
hey b0xy,
you have half of the job done, if you can view files on the system, think about what files could help you gain command execution, maybe you can p****n some of them as you saw on the LFI to RCE module. Another helpfull question would be “what kind of web server are you facing?”
I hope this helps, try harder!
I did thx