Amrik Hore·Oct 29HTB Armaxis WalkthroughI solved the box “Armaxis” which was a very easy boy and had a file inclusion vulnerability via Markdown Injection. The application also…
CyberSpire·Sep 26From File Preview to Server-Side File Read: Testing DuckDB SQL ExecutionAt first glance, a SQL query feature inside an ETL platform doesn’t look particularly dangerous.
M Umer Saqib·Sep 3TryHackMe: Lo-Fi WalkthroughExploiting Local File Inclusion (LFI) to Read Files and Capture the Flag
Yussif Selim·Aug 19Recruit — TryHackMe Walkthrough: From Local File Inclusion to AdministratorIntroduction
Debmalya Mondal·Aug 5The Hollow Shell | Hacker Holidays Day 10 | TryHackMe WriteupExploiting Local File Inclusion and a Zip Slip Vulnerability to Gain Remote Code Execution on the Target Server
aryqmn·Jul 26Recruit — THM WriteupI’m back lol, this time with a web pentest room — Recruit. Here’s the challenge description:
InOSINT TeambyBash Overflow·Jul 18[Support] — Exploiting LFI, Weak Session Cookies, and Command InjectionFrom web enumeration to full compromise by chaining authentication flaws, LFI, and command injection.
bovsec·Jul 4Dosya Sistemine Sızış: Directory Traversal ve LFI Zafiyetlerinin AnatomisiBir sızma testi uzmanı olarak, hedef web uygulamasında dosya okuma veya dahil etme yeteneği kazanmak, çoğu zaman sistemin tamamen ele…
