LFI to RCE using PHP Filters! скачать в хорошем качестве

LFI to RCE using PHP Filters!

Did you know you can turn a Local File Inclusion (LFI) into Remote Code Execution (RCE) using a weird PHP Filter quirk? In this edited stream, Tib3rius explains how and why the trick works, demonstrates how to exploit it manually (and why you'd never want to), and finally uses it to cheese several LFI based TryHackMe rooms! 0:00 Intro 1:09 Tib3rius Institute for Cybersecurity 1:38 PHP Filters Chain: What is this 4:42 PHP://filter conversions: How do they work 11:59 convert.iconv filters: convert encodings 25:07 Example: Let's convert "bums" 35:30 Use PHP's include() and get code execution 47:08 Use it in a CTF: dogcat (THM) 1:06:23 Automate it: generators 1:10:53 Intermission: Raven the cat 1:11:56 Example: File Inclusion Lab (THM) 1:27:51 CTF Example: Team (THM) 1:47:13 Requirements to use PHP Filter Chains 1:52:41 Outro Twitter:   / 0xtib3rius   Twitch:   / 0xtib3rius   Udemy: https://www.udemy.com/user/tib3rius/ Discord:   / discord