Exploiting Local File Inclusion (LFI) Using PHP Wrapper

Gupta Bless
4 min readJul 18, 2020

IN my previous blog related to LFI, I already discussed some basic steps to achieve LFI. Now in this blog I am explaining how we can achieve LFI is there is any input filtration on the server side.

Aim: Our aim is to find admin account password of the website.

There are three tabs in the web application.

· Home

· CV

· Contact

When we click on “home” tab, home variable travel in URL with page parameter. Same…

--

--

Gupta Bless

Security enthusiast working to secure web for others.