In this video I demonstrate how to perform basic Local File Inclusion (i.e. LFI) attacks. Keep in mind that there are many different sub-attack vectors within this type of attack, when the goal is to execute code. The most simple form was chosen in this case, where a file with the .gif extension was uploaded, containing some simple PHP code as a Proof of Concept (PoC).
– Local File Inclusion (LFI)
Stay tuned and subscribe for more upcoming videos showing actual hacks!