Local file inclusion¶

root-me challenge Local File Inclusion: Get in the admin section.

Techniques¶

• Directory traversal

• Path traversal runbook

Counter moves¶

Local file inclusion is the case here. Server-side validation and least privilege are what these reduce to. Defenders’ notes on this are under the application layer as a target.