Login Register




The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


Local File Inclusion challenge filter_list
Author
Message
Local File Inclusion challenge #1
After trying to figure this out for about an hour I finally got it and thought the solution was pretty unique, so I thought I'd post the challenge here.

The point is to gain command execution through LFI and locate the flag, but I think the second part isn't really needed. Just post a pic below for proof that you were able to execute commands and I'll put you on the list of people who were able to do it. The first 3 people to complete the challenge will get NSP and +rep (if it's allowed?) as a prize.

Here's the site with the challenge: http://198.199.84.56

First 3 people to complete it:
1. @Ex094
2.
3.

When 3 people are able to do this I'll post a solution.

Good luck!

[+] 1 user Likes meow's post
Reply

RE: Local File Inclusion challenge #2
No one even attempted this as far as I know. Good lord this forum is boring.

Reply

RE: Local File Inclusion challenge #3
(08-27-2016, 04:21 AM)meow Wrote: No one even attempted this as far as I know. Good lord this forum is boring.

I'll try it tomorrow, then.

Reply

RE: Local File Inclusion challenge #4
(08-27-2016, 06:52 AM)Axi Wrote:
(08-27-2016, 04:21 AM)meow Wrote: No one even attempted this as far as I know. Good lord this forum is boring.

I'll try it tomorrow, then.

do it faggot

Reply

RE: Local File Inclusion challenge #5
Been on it for 5 hours now, Hit a brick wall but I think I might come up with some shiz

Holy shit! This was an amazing challenge, Had to read loads of stuff about LFI hence learned some good stuff. Thanks alot @meow

Executed commands were ls and uname plus echoed some shiz Tongue

Proof:
[Image: zftpjm.png]
(This post was last modified: 08-27-2016, 04:46 PM by Ex094.)
My Blog: http://www.procurity.wordpress.com
Donations: 1HLjiSbnWMpeQU46eUVCrYdbkrtduX7snG

Reply

RE: Local File Inclusion challenge #6
(08-27-2016, 04:08 PM)Ex094 Wrote: Been on it for 5 hours now, Hit a brick wall but I think I might come up with some shiz

Holy shit! This was an amazing challenge, Had to read loads of stuff about LFI hence learned some good stuff. Thanks alot @meow

Executed commands were ls and uname plus echoed some shiz Tongue

Proof:
[Image: zftpjm.png]

Congrats on being the first person to solve it!

[+] 1 user Likes meow's post
Reply

RE: Local File Inclusion challenge #7
Forgot about this, but I did it.
[Image: 6LVokS.png]
-------------------------------------------
Got the flag anyway
Code:
---------------------------------------------------------------------------- The flag is: SecurusGlobal{Byp4ss1ng_%00_p01s0n1ng_pr0t3ct10n_l1k3_4_b055!!} ----------------------------------------------------------------------------
Location: /Th1S_is_Th3__Fuk1n6___FLAAAAAAAAAG___READ_ME

Reply

RE: Local File Inclusion challenge #8
let me try tomorrow Smile, now its late at here

Reply

RE: Local File Inclusion challenge #9
(08-29-2016, 09:43 PM)Altair Wrote: let me try tomorrow Smile, now its late at here

Thanks for sharing...

Reply

RE: Local File Inclusion challenge #10
(08-29-2016, 09:43 PM)Altair Wrote: let me try tomorrow Smile, now its late at here

Do it. it's good fun and it's not what you would expect.

Reply