Site Logo
Niklas Heringer - Cybersecurity & Math

Lfi

  • Uni Exam Practice VM practice: more of LFI2RCE

    Posted on 6 mins

    In this university exam practice VM, I explored file upload handling, discovered a separate file inclusion point, and chained it with an uploaded webshell to gain remote command execution.
    Uni Exam Practice VM practice: more of LFI2RCE
  • From LFI to RCE: Exploiting File Inclusion Like a Pro

    Posted on 20 mins

    A hands-on deep dive into exploiting file inclusion vulnerabilities — from simple LFI to full RCE using session poisoning, log injection, and PHP wrappers.
    From LFI to RCE: Exploiting File Inclusion Like a Pro
  • Intro to File Inclusion

    Posted on 8 mins

    An in-depth and hands-on walkthrough on spotting and exploiting Local File Inclusion (LFI) — from classic payloads to modern bypasses, straight from HTB Academy labs.
    Intro to File Inclusion