Web - Server

Wednesday 11 January 2017, 00:30  #1
Web - Server -Remote File Inclusion

Hi guys,

I managed to include a php file that is on my server. The problem is, the code in the file seems to be executed on my server. If i use a command like system(’ls’), the files and folders that are printed are the one on my server. Help?

Thursday 12 January 2017, 14:38  #2
Web - Server -Remote File Inclusion
Dutisto
  • 1 posts

Hi Alex,

You know you got to display only the php code of index.php. So think of : What do you really do ? Who does what exactly ?
Answer those questions, and you’ll got the solution :)

Monday 16 January 2017, 15:31  #3
Web - Server -Remote File Inclusion

Thank you Dutisto for you answer.

Not a spoiler: The PHP code was executed on my server because PHP was enabled. To fix this issue, disable PHP execution in a .htaccess file. The code will then be executed on the root-me.org server.

Thursday 10 May 2018, 18:31  #4
Web - Server -Remote File Inclusion
8020в4
  • 1 posts

Alexandre Guertin, thank you!!!!

Friday 19 October 2018, 13:58  #5
Web - Server -Remote File Inclusion
iRRePReSSiBLe
  • 2 posts

Hey guys,
It seems like I’ve found the flag, but can not validate it :(
Is there anybody who can help me?
Thank you!