jetlib.sec » Full Disclosure » Re: Analysis of the "r00t 4 LFI Toolkit"

Feeds

133122 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Full Disclosure

• February 19, 2012
• 

  Re: Analysis of the "r00t 4 LFI Toolkit"

  Posted: February 19th, 2012, 10:06am PST

  Tags:   

  Posted by InterN0T Advisories on Feb 19

  Thank you for the response, I didn't know it was included in the Weevely
  tool, but I did see it used in a few "priv8" PHP shells too.
  
  inclusion
  
  of
  
  it
  
  looks
  
  here's
  
  Referer:Array1=iz&Array2=&Array3=&Array4=&Array5=&Array6=&Array7=&Array8=&Array0=[BASE64
  
  http://forum.intern0t.org/offensive-guides-information/4113-analysis-r00t-4-local-file-inclusion-toolkit.html...