Skip to content
Permalink
Branch: master
Find file Copy path
Find file Copy path
4 contributors

Users who have contributed to this file

@yasinS @EdOverflow @sp1d3r @streaak
45 lines (32 sloc) 1.37 KB

LFI

Filter Bypass

../\
..\/
/..
\/..
/%5c..

FFmpeg Local File Disclosure

This script by @neex can be used to disclose local files on FFmpeg hosts which parse externally-referencing HLS playlists.

Steps to reproduce

  1. Please download the script from @neex to your "attacker" instance
  2. Execute the script with your desired parameters: python3 gen_xbin_avi.py file:///etc/hostname bugbounty.avi
  3. Upload the generated AVI file to your target site (e.g. within a 'video upload page')
  4. The target may process the malicious HLS inclusion with FFmpeg on the server-side.
  5. Play the uploaded AVI via the target site. If successful, your desired file will be disclosed within the video.

Alternative scripts exist which may generate different HLS formats or lead to the desired file being disclosed in a different manner.

Blogs

You can’t perform that action at this time.