
Explore file inclusion vulnerabilities, including local and remote inclusion and directory traversal, and how weak input validation can expose sensitive files and even enable remote command execution.
Explore how path traversal allows attackers to read arbitrary files by manipulating URLs and inputs, using dot-dot-slash tricks to access Linux system files.
Discover how local file inclusion exploits unchecked inputs in PHP (and other languages) by manipulating file parameters with dot dot slash to read arbitrary files via include, require, or file_get_contents.
In this course you will learn about Local File Inclusion (LFI), Remote File Inclusion (RFI) and other vulnerabilities that may exist in web apps. You will learn how to prevent them as a developer and how you can leverage them to hack into servers. The course contains examples hack, that you could try on your own home lab.
For this vulnerability to work, the website needs to have a file inclusion vulnerability. But, if it's present you might either hack the server directly or indirectly through another protocol like SSH or RDP. The course will also show you about the steps every hacker takes, regardless of what is the target. You'll learn how to scan for apps running on a server and how you might disclose if the target is running a Linux or Windows server.
If you are new to hacking, this course is for you. You'll be able to hack a server, given this vulnerability is present in the web app. It's a beginners course and you don't need any prior experience. No programming experience is needed, but we will go over a tiny bit of programming. However, as this is a hacking course the main focus is on that.