dsad

2026-04-19 21:10:40 +07:00
parent 5fdd214fdc
commit 27381d4e37
211 changed files with 53571 additions and 0 deletions
--- a/vuln-lab/web/www/page.php
+++ b/vuln-lab/web/www/page.php
@@ -0,0 +1,17 @@
+<?php
+// LFI — path traversal, php:// filter, allow_url_include.
+$page = $_GET['page'] ?? $_GET['file'] ?? $_GET['template'] ?? 'home';
+
+// strip trailing .php if user didn't add it
+$target = $page;
+if (!preg_match('/\.(php|html|txt|log)$/', $target) && strpos($target, '://') === false) {
+    $target .= '.php';
+}
+
+echo "<!DOCTYPE html><html><body>";
+echo "<h1>Pages · $page</h1><hr>";
+
+// No sanitization at all — directly include.
+@include($target);
+
+echo "</body></html>";