Lo-Fi
Want to hear some lo-fi beats, to relax or study to? We've got you covered!
Last updated
Was this helpful?
Want to hear some lo-fi beats, to relax or study to? We've got you covered!
Last updated
Was this helpful?
For this challenge, we skip the Nmap scan as the room description directs us to a specific webpage. Our objective is to test for local file inclusion. On the index page, we find links to various genres.
Clicking on a link redirects us via the "page" parameter. Additionally, there is a filter in place that blocks absolute paths.
We test the "page" parameter for Local File Inclusion (LFI) using FFuF with the LFI-Jhaddix.txt wordlist and successfully identify several valid paths.
We attempt a basic local file inclusion by accessing /etc/passwd, and it works successfully.
Next, we attempt to include the /flag.txt file located in the root directory, and we successfully retrieve it.
