DVWA icon indicating copy to clipboard operation
DVWA copied to clipboard

file inclusion error

Open cmq104 opened this issue 1 year ago • 0 comments

Questions here may or may not be answered depending on the state of the question, to increase your chance, read this before asking Asking For Technical Help.

Basically, the more details you give, the more chance of getting an answer. We need at least:

  • Where did you get DVWA from?

  • github

  • What OS are you installing it on?

  • Ubuntu 18.04.6 LTS

  • Last five lines from the web server access and error log from the time the error occurred if you got that far. [-] Tested URL: http://localhost/DVWA/vulnerabilities/fi/?page=../../../../../../../etc/passwd (Not Vulnerable)
    Notice: Array to string conversion in /var/www/html/DVWA/dvwa/includes/dvwaPage.inc.php on line 77

  • The error you got when you got stuck.

image

I write a python script to detect path travelsal vulnerabilities ,and it report Array to string conversion error.

my setup is in following picture image

  • Any previous errors.
  • no.
  • What you have tried to do yourself to fix the problem. at first i use dotdotslash(another github project which can detect path travelsal), and it report Array to string conversion error. Then i try to put payload in url, and it works. image then i wrote a python script using chatgpt, trying to found if its dotdotslash's problem, but it shows the same error,

Support will only be given for users running the latest pull of code from GitHub. Not a tagged release, not a pre-installed app, not a ZIP you got from a mate.

cmq104 avatar May 17 '24 03:05 cmq104