OSCP Learning Notes – WebApp Exploitation(4)

Local File Inclusion[LFI]

 

Target Pentester Lab: Download from the following website:

https://www.vulnhub.com/entry/pentester-lab-php-include-and-post-exploitation,79/

技术图片

 

1. Use netdiscover to find the IP of the target server.

netdiscover

技术图片