I have previously shown you several methods for which we can exploit LFI vulnerabilities as well as genaral usage of Burp Suite tool set. I have put together a brief video of one last method I wanted to share with you. The methods used all build upon the previous tutorials only the location is new. We will take advantage of the system shortcuts made available by the /prov/self/fd file system. Once located they can be enumerated to locate log files for potential code injection vector. In the video I will show you an example of this method, sit back and enjoy....
VIDEO:
HR's BURP SUITE PACK - DOWNLOAD (NEW LINK): http://uppit.com/6fj3c4vxi4xk/HR-BURP-PACK_1.23.12.rar
Showing posts with label FD_SIZE. Show all posts
Showing posts with label FD_SIZE. Show all posts
Monday, January 16, 2012
Subscribe to:
Posts (Atom)