WHOAMI
- Robemar Aviles
Tryhackme
- View
Hack the box
- View
Academy HTB
- View
Over The Wire
- View
  - Bandit
    Level 0
    Level 1
    Level 2
    Level 3
    Level 4
    Level 5
    Level 6
    Level 7
    Level 8
    Level 9
    Level 10
    Level 11
    Level 12
Under The Wire
- View
PicoCTF
- View
Portswigger
- View
Hacker101
- View
  - Micro-CMS v1
  - Trivial
Python
- View
  - Files
    Number 1 to 100
  - Hackerrank
    Power - Mod Power
    Mod Divmod
    String Split and Join
    What's Your Name?
    Find the Runner-Up Score!
    Print Function
    Loops
    Division
    Arithmetic
    Python If-Else
    Hello World
SQL
- View
  - Hackerrank
    Higher Than 75 Marks
    Weather Observation Station 1
    Weather Observation Station 3
    Weather Observation Station 4
    Select By ID
    Select All
    Revising the Select Query II
    Revising the Select Query I
    Japanese Cities' Attributes
    Japanese Cities' Name
Notes
- View
Commands
- View
Google Chrome Password
- Decrypt Google Chrome Password
- LaZagne
Comptia Security+ 701
CCNA
Malware Analysis Lab
TCM

Powered by GitBook

On this page

TCM

Practical Web Hacking

LFI/RFI

Lab: File path traversal, simple case

Previouslab 2 NextLab: File path traversal, traversal sequences blocked with absolute path bypass

Last updated 6 months ago

just navigate through the web app

apply all filter

we can see that this jpg is being retrieve

we can just use normal lfi

or we could just use a wordlist for us to bruteforce this

using wordlist like Jhaddix.txt