Lab

One vulnerable include(), a virtual filesystem, and every control people put in front of it. The useful question is not whether a payload works — it is which control stops it, and which ones only look like they do. Start with the plain traversal, then turn on str_replace and try ....//. Defense in Depth covers what to recommend once you have found one.

Loading the lab…