Writeups and Walkthroughs

Home GitHub Portfolio Twitter/X Medium Cont@ct

✍️Writeups and Walkthroughs
THM
HackTheBox
Vulnhub
- Brainpain (BoF)
DockerLabs
DVWA
Mutillidae II
Secure Bank
PortSwigger - Web Security Academy
HomeMade Labs

Powered by GitBook

On this page

Mutillidae II

IDOR & File Inclusion

Extracting User Accounts

PreviousEdit Another User's Profile NextExtracting User Accounts with Local File Inclusion

Last updated 3 months ago

Lab 19: Insecure Direct Object References - Extracting User Accounts

Go to directory browsing page:

and change the reference value of attribute with: /etc/passwd

https://127.0.0.1/index.php?page=/etc/passwd

https://127.0.0.1/index.php?page=directory-browsing.php