Local File Inclusion - Double encoding

30 Points

Include can be dangerous.

Author

zM, 13 June 2016

Level

Validations

4477 Challengers 5%

Note

220 Votes

To reach this part of the site please login

3 Solutions

Display solutions Submit a solution

Challenge Results

Pseudo	Challenge	Lang	date
M3chj0ker	Local File Inclusion - Double encoding		20 October 2018 at 00:32
wibf	Local File Inclusion - Double encoding		19 October 2018 at 23:22
mrojz	Local File Inclusion - Double encoding		19 October 2018 at 21:57
Ali	Local File Inclusion - Double encoding		19 October 2018 at 19:58
Elendar	Local File Inclusion - Double encoding		19 October 2018 at 15:52
Th1b4u9	Local File Inclusion - Double encoding		19 October 2018 at 14:56
iRRePReSSiBLe	Local File Inclusion - Double encoding		19 October 2018 at 11:16
tokyocold	Local File Inclusion - Double encoding		19 October 2018 at 05:45
WestWestWest	Local File Inclusion - Double encoding		18 October 2018 at 22:38
lecroc63	Local File Inclusion - Double encoding		18 October 2018 at 21:47

56 Challenges

Results	Challenge's Name	Validations	Number of points	Difficulty	Author	Note	Solution
	HTML	50% 49186	5		g0uZ		2
	HTTP - Open redirect	14% 13234	10		Swissky		10
	Command injection	13% 12414	10		sambecks		9
	Weak password	39% 37810	10		g0uZ		5
	User-agent	26% 25399	10		g0uZ		10
	Backup file	20% 19217	15		g0uZ		6
	HTTP - POST	4% 3761	15		Th1b4ud		8
	HTTP directory indexing	26% 25755	15		g0uZ		4
	HTTP Headers	17% 16837	15		Arod		8
	HTTP verb tampering	16% 15722	15		g0uZ		10
	Install files	17% 16180	15		g0uZ		2
	Improper redirect	13% 12642	15		Arod		9
	CRLF	10% 9884	20		g0uZ		6
	File upload - double extensions	12% 11775	20		g0uZ		8
	File upload - MIME type	10% 8996	20		g0uZ		7
	HTTP cookies	15% 14436	20		g0uZ		5
	Directory traversal	13% 12200	25		g0uZ		2
	File upload - null byte	9% 8476	25		g0uZ		4
	PHP assert()	5% 4295	25		Birdy42		8
	PHP filters	8% 7619	25		g0uZ		3
	PHP register globals	7% 6335	25		g0uZ		1
	File upload - ZIP	2% 1977	30		ghozt		3
	Command injection - Filter bypass	2% 1517	30		sambecks		6
	Local File Inclusion	10% 9781	30		g0uZ		3
	Local File Inclusion - Double encoding	5% 4477	30		zM		3
	PHP - Loose Comparison	2% 1476	30		ghozt		4
	PHP preg_replace()	4% 3521	30		sambecks		4
	PHP type juggling	4% 3292	30		vic511		4
	Remote File Inclusion	5% 4309	30		g0uZ		8
	Server-side Template Injection	4% 3504	30		righettod		3
	SQL injection - authentication	14% 13679	30		g0uZ		11
	SQL injection - authentication - GBK	3% 2492	30		dvor4x		3
	SQL injection - string	7% 6386	30		g0uZ		8
	XSLT - Code execution	1% 862	30		ghozt		5
	LDAP injection - authentication	5% 4037	35		g0uZ		8
	NoSQL injection - authentication	3% 2827	35		mastho		7
	Path Truncation	3% 2043	35		Geluchat		3
	PHP Serialization	3% 2780	35		Arod		2
	SQL injection - numeric	6% 5155	35		g0uZ		5
	SQL Injection - Routed	2% 1188	35		soka		5
	SQL Truncation	3% 2308	35		Geluchat		2
	XML External Entity	2% 1581	35		sambecks		1
	XPath injection - authentication	3% 2969	35		g0uZ		4
	Java - Spring Boot	1% 622	40		dvor4x		2
	Local File Inclusion - Wrappers	1% 987	40		sambecks		2
	SQL injection - Error	3% 2350	40		sambecks		4
	SQL injection - Insert	1% 967	40		sambecks		2
	SQL injection - file reading	2% 1907	40		Arod		2
	XPath injection - string	2% 1629	40		g0uZ		4
	NoSQL injection - blind	1% 912	45		ghozt		3
	SQL injection - Time based	2% 1737	45		ycam		2
	Server Side Request Forgery	1% 167	50		sambecks		3
	SQL injection - blind	4% 3024	50		g0uZ		4
	LDAP injection - blind	2% 1169	55		g0uZ		1
	XPath injection - blind	1% 742	75		g0uZ		3
	SQL injection - filter bypass	1% 682	80		sambecks		5