Home

Welcome to the liffy wiki!

Usage

• Check URL using the following techniques:

  • data://
  • input://
  • expect://
  • filter://

• Use Log poisoning for LFI

  • Apache access.log
  • SSH auth.log

• Use Custom log location

• Use /proc/self/environ for code exec

• Relatively traverse directories