LFI help

Re: LFI help

johndoe — Sat, 14 Jan 2012 18:01:06 -0600

i have a similar problem but i managed to upload shells in 2 or 3 serves but give me same errors, i did it through search box here is the post:

http://sla.ckers.org/forum/read.php?16,40512

i posted pics of how it was done.

Re: LFI help

Reiners — Wed, 14 Dec 2011 11:01:14 -0600

hm? it's a path traversal

Re: LFI help

_antivirus_ — Tue, 13 Dec 2011 11:47:17 -0600

Does it mean ?
/home/public_html/test ?

Re: LFI help

Skyphire — Tue, 13 Dec 2011 06:04:49 -0600

_antivirus_ Wrote:
-------------------------------------------------------
> Reiners,
> What means ../../../../../../../../../ ??

Are you serious?

Re: LFI help

_antivirus_ — Sat, 03 Dec 2011 03:15:11 -0600

Reiners,
What means ../../../../../../../../../ ??

Re: LFI help

Reiners — Thu, 01 Dec 2011 13:23:12 -0600

https://websec.wordpress.com/2010/02/22/exploiting-php-file-inclusion-overview/

Re: LFI help

alexfoo — Mon, 28 Nov 2011 16:40:30 -0600

I've been meaning to answer this thread for a while.

/proc/self/environ is no more.. I don't know if it's removed from the main line kernel but debian and ubuntu atleast don't have the file any more.

There's other ways to turn LFI to RCE. Try including the access_log after you've accessed any file with your user-agent spoofed to '' or something. Be creative! There's tons of ways!

LFI help

Anarchy Angel — Wed, 26 Oct 2011 22:09:36 -0500

i been trying to upload a shell to a few servers via the /proc/self/environ LFI method and just can not get it done. I have used temper data and other home brewed scripts with nothing. has anyone else had this issue with a known vector just stopped working out of the blue? ideas?