Hot answers tagged file-inclusion
3
On Solaris, you get a process environment with these commands:
pargs $$
pargs -e $$
There is no shortcut like /proc/self with Solaris so you need to know the PID of the process, eg.:
/proc/$$/psinfo
Moreover, only the arguments are visible here, the environment is in /proc/pid/as and I doubt this file to be exploitable with LFI as it is kind of a ...
3
Carpet bombing is a military term - meant to indicate laying a carpet of explosives or incendiaries in order to kill/destroy anything within the target area.
Wikipedia says:
Carpet bombing is a large aerial bombing done in a progressive manner
to inflict damage in every part of a selected area of land.
The phrase evokes the image of explosions ...
2
It can be exploited by log files injection. it might be possible to inject Apache log files, but these files needs root access to open, so it will not be possible to open them via LFI. to solve this problem, we inject temporary Apache log files, which are existed under this path:
proc/self/fd/12
or
proc/self/fd/14
or
proc/<apachi pid>/fd/12
or
...
Only top voted, non community-wiki answers of a minimum length are eligible
