passwd file

Asked Aug 23 '19 at 09:43

Active Aug 24 '19 at 17:53

Viewed 323 times

I want to create test case about LFI (Local File Inclusion) but I couldn't. Old servers can include /etc/passwd file with php's include file

For example:

include ("/etc/passwd");

This prints passwd file to screen but when I tried it in ubuntu 16.04's default apache2 service it can not include this file it blocks somehow, it just includes files in the same directory.

I tried to edit php-mods but I could not find the solution.

How can I import /etc/passwd or /proc/self/* files.

Thanks.

edited Aug 24 '19 at 17:53

Olaf Kock

46,930
8
59
90

asked Aug 23 '19 at 09:43

Berkay Yıldız

Isn't it nice to be protected - out of the box - from a whole class of errors? – Olaf Kock Aug 23 '19 at 11:04
Yes, but I need vulnerable app for test case. – Berkay Yıldız Aug 24 '19 at 08:58
I've added the php tag, as you're asking about PHP configuration. This might get someone's attention rather than looking purely at the apache crowd – Olaf Kock Aug 24 '19 at 17:53

Apache Ubuntu php include /etc/passwd file

0 Answers0