Tutorial LFI Satake Atari rwxr-xr-x 0 03:09

Filename	Tutorial LFI
Permission	rw-r--r--
Author	Satake Atari
Date and Time	03:09
Label
Action

Tutorial LFI , mula-2 pakai chrome , sbb chrome paling mudah :v Mula -2 buka ini dan klik Add to chrome :v >> https://chrome.google.com/webstore/detail/user-agent-switcher-for-c/djflhoibgkdhkhhcedjiklpkjnoahfmg pastu ade kuar bende ni >> http://prntscr.com/wjtqm Tkn bende alah tu and than tkn setting , tgk gambo ini :p > http://prntscr.com/wjtyf Pastu nmpak kan bende mcm ni ? >> http://prntscr.com/wju2e okeh , koarng isi ni New User-agent name >> LFI New User-Agent String >>

Luffy HMCA

Filename: Group >> LFI Append? >> Replace Indicator Flag >> LFI okeh dah , pastu klik add :v Pastu , korang leh hack site :v Dork : inurl:allinurl:?index.php?page=contact.php Dork tu boleh ubah jika pandai :v contoh kalo korang nk cari site BRASIL camni allinurl:?index.php?pagina=contato.php site:br ha tu untuk site brasil , tapi kalo pakai tu suma da x dara , kene adjust pepandai :V yg dork br tu , aku cuma tukar page and contact jadi bahasa brasil , contact tu leh ubah jadi event , gallery , history , etc ok jom cari web DAPAT :V nah ini site nye , kalo korang dpt ini mcm , korang wat cam ini http://experts-ci.net/index.php?page=aboutus.php jadi cam ini http://experts-ci.net/index.php?page=%2Fproc%2Fself%2Fenviron korang just tambah ini je >> %2Fproc%2Fself%2Fenviron bile korang dpt site , dia jadi cam ini kalo korang pakai dork english tadi , site.com/index.php?page=contact.php korang perasan x ? dork nye inurl:allinurl:?index.php?page=contact.php ade contact.php , kalo korang uba contact jadi event , dia akan jadi camni la site yg kuar site.com/index.php?page=event.php korang just ubah cam ini je site.com/index.php?page=%2Fproc%2Fself%2Fenviron ok , balik semula pada site tadi , http://experts-ci.net/index.php?page=aboutus.php = http://experts-ci.net/index.php?page=%2Fproc%2Fself%2Fenviron korang tkn kat bende ni >> http://prntscr.com/wjxa5 pastu klik LFI ,pastu Klik LFI , k , nnti dia ade DOCUMENT_ROOT=/home/expertsc/public_html. .. . . entah apebende , pastu bawahnye , ade tulis LUFFY HMCA , and ade tmpat upload shell , korang upload je shell cam biasa , >> http://experts-ci.net/namashell.php okay GOOD LUCK :v ade lagi 1 aku nk ckp , contoh kalo site.com/FILE/index.php?page=contact.php jika camtu , contoh ade file ke kat situ , cam ni , site.com/novo/index.php?page=contact.php bile upload shell dia jadi camni , site.com/novo/namashell.php novo tu nama file ok , contoh nama file nye , buntut , ltk la site.com/buntut/namashell.php fhm ? k bye , :D >>>> Credit to Mr. Magic <<<<<