Niklas Heringer - Cybersecurity Blog

Log-Poisoning

From LFI to RCE: Exploiting File Inclusion Like a Pro

Posted on Jun 10, 2025 20 mins

A hands-on deep dive into exploiting file inclusion vulnerabilities — from simple LFI to full RCE using session poisoning, log injection, and PHP wrappers.