File Inclusion
-
Uni Exam Practice VM practice: more of LFI2RCE
Posted on 6 mins
In this university exam practice VM, I explored file upload handling, discovered a separate file inclusion point, and chained it with an uploaded webshell to gain remote command execution.
-
From LFI to RCE: Exploiting File Inclusion Like a Pro
Posted on 20 mins
A hands-on deep dive into exploiting file inclusion vulnerabilities — from simple LFI to full RCE using session poisoning, log injection, and PHP wrappers.