Local File Inclusion challenge

Local File Inclusion challenge - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: Local File Inclusion challenge (/Thread-Local-File-Inclusion-challenge)

Pages: 1 2

Local File Inclusion challenge - meow - 08-17-2016

After trying to figure this out for about an hour I finally got it and thought the solution was pretty unique, so I thought I'd post the challenge here.

The point is to gain command execution through LFI and locate the flag, but I think the second part isn't really needed. Just post a pic below for proof that you were able to execute commands and I'll put you on the list of people who were able to do it. The first 3 people to complete the challenge will get NSP and +rep (if it's allowed?) as a prize.

Here's the site with the challenge: http://198.199.84.56

First 3 people to complete it:
1. @Ex094
2.
3.

When 3 people are able to do this I'll post a solution.

Good luck!

RE: Local File Inclusion challenge - meow - 08-27-2016

No one even attempted this as far as I know. Good lord this forum is boring.

RE: Local File Inclusion challenge - Wildfire - 08-27-2016

(08-27-2016, 04:21 AM)meow Wrote: No one even attempted this as far as I know. Good lord this forum is boring.

I'll try it tomorrow, then.

RE: Local File Inclusion challenge - meow - 08-27-2016

(08-27-2016, 06:52 AM)Axi Wrote:
(08-27-2016, 04:21 AM)meow Wrote: No one even attempted this as far as I know. Good lord this forum is boring.

I'll try it tomorrow, then.

do it faggot

RE: Local File Inclusion challenge - Ex094 - 08-27-2016

Been on it for 5 hours now, Hit a brick wall but I think I might come up with some shiz

Holy shit! This was an amazing challenge, Had to read loads of stuff about LFI hence learned some good stuff. Thanks alot @meow

Executed commands were ls and uname plus echoed some shiz Tongue

Proof:

RE: Local File Inclusion challenge - meow - 08-28-2016

(08-27-2016, 04:08 PM)Ex094 Wrote: Been on it for 5 hours now, Hit a brick wall but I think I might come up with some shiz

Holy shit! This was an amazing challenge, Had to read loads of stuff about LFI hence learned some good stuff. Thanks alot @meow

Executed commands were ls and uname plus echoed some shiz

Proof:

Congrats on being the first person to solve it!

RE: Local File Inclusion challenge - Wildfire - 08-29-2016

Forgot about this, but I did it.
[Image: 6LVokS.png]

-------------------------------------------
Got the flag anyway

Code:
----------------------------------------------------------------------------
The flag is: SecurusGlobal{Byp4ss1ng_%00_p01s0n1ng_pr0t3ct10n_l1k3_4_b055!!}
----------------------------------------------------------------------------

Location: /Th1S_is_Th3__Fuk1n6___FLAAAAAAAAAG___READ_ME

RE: Local File Inclusion challenge - Altair - 08-29-2016

let me try tomorrow Smile

, now its late at here

RE: Local File Inclusion challenge - pvnk - 08-30-2016

(08-29-2016, 09:43 PM)Altair Wrote: let me try tomorrow , now its late at here

Thanks for sharing...

RE: Local File Inclusion challenge - Wildfire - 08-30-2016

(08-29-2016, 09:43 PM)Altair Wrote: let me try tomorrow , now its late at here

Do it. it's good fun and it's not what you would expect.