Penetration Testing - Local File Inclusion (LFI)

[@TutorialsPoint_]

Get Certified in Web Application Penetration: www.tutorialspoint.com/web-application-penetration-online-training/index.asp
Use coupon ""RUclips12"" to get “FLAT 12%’’ OFF at Checkout.

[@Saw-o3h]

I don't know you believe or not, but I got PWK materials and I have read LFI vulnerability section several times but I have not understood it, but this video is much better than PWK PDF and videos.

[@suchitrawalke4499]

Thank you so much...you make it so simple to understand.

[@GolitePlays]

who else is here because they mispelled lofi

[@envyy5582]

Brrooo🤣🤣😂😂😭😂😂

[@mohitdemla3240]

thumbs up from Australia. Well explained, Bud

[@AmanKhan-bw3rt]

You r very good teacher

[@viratgajjar7860]

Thank you you explained it in very easy way.

[@monicamanilal5825]

Thank you for the explanation. May you please explain the difference between LFI and directory traversal? Thanks

[@qusayeyad760]

I dont know if am late or note but here is the diff between LFI and directory traversal. Directory Traversal is a vulnerability for READING the document, the LFI is a vulnerability for EXECUTING the document. I hope you still alive since its been 2 years lol 😂

[@krishnakumar.r6551]

Nice explanation. Thanks

[@udhayn822]

very easy to understand 😃

[@CesarPerez-cs5pf]

very well explained :-) thanks

[@anoopshetty3580]

pls guide m

[@sahib848]

25 lac subs? 😧
And views 23k .
How?..
It's real subs Or not

[@aneeltripathy7420]

only index.php has this sorts of vulnerability?

[@h0tPlug1n]

No. We need to find for GET parameters either directly in the URL or indirectly in the BURP to inject these.

[@likeapple1929]

Hi Im wondering if the server sanitize inputs, for example etc is filtered, how can we perform LFI then?

[@farzimocha9499]

won't be able to then

[@h0tPlug1n]

We can try encrypting the word etc or any other method like encoding in ascii