LFI

Web Exploitation

Local File Inclusion (LFI) Fundamentals: Path Traversal, /etc/passwd, and Filter Bypasses

A practical introduction to Local File Inclusion: path traversal, reading /etc/passwd, null byte tricks, and PHP filter bypasses, plus defenses.
2026.02.05
Web Exploitation
Web Exploitation

From LFI to RCE: Practical Escalation Techniques

How to escalate a PHP Local File Inclusion into remote code execution via log poisoning, php://filter, data wrappers, sessions and /proc.
2026.02.01
Web Exploitation
Web Exploitation

Path Traversal: Escaping the Web Root with ../, Encoding Tricks, and Null Bytes

A practical guide to directory traversal: dot-dot-slash, encoding bypasses, absolute paths, null bytes, plus blue-team defenses.
2026.01.20
Web Exploitation
Offensive Security Lab Japan

Vulnlab Data Walkthrough by Yunolay (LFI with path traversal, Docker privileged user)Offensive Security Lab Japan Boot2Root offsec-4-diveintoive Writeup by Yunolay (LFI2RCE via PHP Filters, RFI)

IntroduceI'm new to trying Boot2Root and was provided with a vulnerable machine, but it's mixed in with my home network ...
2023.10.29
Offensive Security Lab Japan