Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote -1 down vote favorite

I am trying to exploit a local file inclusion vulnerability on a Solaris server for my security course. The server is running Apache2 through CoolStack. What is the file that I need to open? The examples I saw so far all used Linux.

share|improve this question
Welcome to IT Security! I think this question is too broad to be reasonably answerable in the SEI fashion. I would recommend reading through some of the other content on the site and then coming back with something more specific. – Scott Pack Oct 29 '12 at 13:33

closed as not a real question by Scott Pack, Rook, Iszi, Thomas Pornin, Terry Chia Oct 30 '12 at 11:29

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, see the FAQ.

1 Answer

up vote 1 down vote

You should read LFI to RCE. You need to be able to upload a file or populate a log file with a PHP tag and then include this file using the LFI vulnerability.

share|improve this answer
thanks for the answer and the great paper but i konw that much, i just dont know what log file i need to populate because it is a solaris server. – flooringleveret Oct 29 '12 at 7:45
@flooringleveret how old are you? Do you really expect people to just do this shit for you? – Rook Oct 29 '12 at 16:00

Not the answer you're looking for? Browse other questions tagged or ask your own question.