Web Hacker Basics 04 (Local and Remote File Inclusion)

Рет қаралды 34,069

Күн бұрын

When bringing up File Inclusion, it's difficult not to talk about these vulnerabilities together: Directory Traversal, Local File Inclusion, and Remote File Inclusion. While technically separate vulnerabilities, they build off of each other; and if one exists it's very likely that another does too.
Testing for File Inclusion:
www.owasp.org/index.php/Testi...)
www.owasp.org/index.php/Testi...
www.owasp.org/index.php/Testi...
Unrestricted File Uploads:
www.owasp.org/index.php/Unres...
www.owasp.org/index.php/Test_...)
Server Side Request Forgery (SSRF):
www.acunetix.com/blog/article...
cwe.mitre.org/data/definition...

Пікірлер: 24

@NetsecExplained 2 жыл бұрын

Thanks for watching! Let me know what topic you would like to see covered next?

@sanketjunagade1301 2 жыл бұрын

Can you please help me in mitigation code for flask api

@hunterkiller51 4 жыл бұрын

A really clear and stright forward explanation, Much thanks man!

@joshuaeuceda4635 2 жыл бұрын

Well done, crisp, clear and simplified.

@JeanDoeShow 5 жыл бұрын

Cool, very good explanation! Even I understand it now! Thank you very much! :) EDIT: And you just got yourself another sub. Keep up the good work!

@SpiritualFathers 3 жыл бұрын

Sounds very proffesional and to the point

@kirill9312 4 жыл бұрын

This video is very useful, thank you!

@MadeItHappenDaily 5 жыл бұрын

This was an excellent video! I can't wait to see the rest of them! Liked and Subscribed. RFI FTW

@kevinhaggins9114 Жыл бұрын

You have a good way of teaching with great presentation. You are probably one of the best I came across. You should have way more subscribers l.

@NetsecExplained Жыл бұрын

Glad it was helpful, I just need to release more videos

@beaver_stealer 4 жыл бұрын

More than I asked for! Thanks

@vijaykumar-hc6jz 3 жыл бұрын

My Goodness! Your videos are so great I'm wondering why the heck you have only this few subscribers.

@NetsecExplained 3 жыл бұрын

Thank you. Honestly, I think it has to do with how infrequently I upload videos. Being a full-time consultant makes it hard to create content consistently. But I have a new video coming soon, be on the lookout.

@christiaan_saaiman 3 жыл бұрын

Netsec Explained your content is at such a good quality, definitely recommend 12/10

@sxckme.sideways_3955 2 жыл бұрын

Nicely explained! Thanks!

@cptvasilyzaytsev9245 6 ай бұрын

Great video!

@mrparadox9683 4 жыл бұрын

thanks for useful tips!

@kabirnir3623 3 жыл бұрын

Wonderful described

@randomlegend631 11 ай бұрын

Excellent

@The_One_0_0 4 жыл бұрын

Can this be done with burpsuite

@medhasni6432 2 жыл бұрын

why that part from 4:55 didnt work for me?? it showed nothing

@krolee7973 2 жыл бұрын

same here

@NetsecExplained 2 жыл бұрын

I created secret.txt locally on my system as shown at 3:40. You can create a file locally or look for one you already know exists, such as /etc/passwd on Linux/Unix systems.