diff --git a/FileInclusion/hint2/hint2.php b/FileInclusion/hint2/hint2.php new file mode 100644 index 0000000..baf461b --- /dev/null +++ b/FileInclusion/hint2/hint2.php @@ -0,0 +1,7 @@ + + +

+

“ You Shall Not Pass!!! ”

+

You found one!!

+ + \ No newline at end of file diff --git a/FileInclusion/info.php b/FileInclusion/info.php new file mode 100644 index 0000000..d2b25e4 --- /dev/null +++ b/FileInclusion/info.php @@ -0,0 +1,3 @@ + \ No newline at end of file diff --git a/FileInclusion/pages/1.php b/FileInclusion/pages/1.php new file mode 100644 index 0000000..90dd5a7 --- /dev/null +++ b/FileInclusion/pages/1.php @@ -0,0 +1,6 @@ + + +

+

Why Dont You Click the Other Button??

+ + \ No newline at end of file diff --git a/FileInclusion/pages/2.php b/FileInclusion/pages/2.php new file mode 100644 index 0000000..609a1fc --- /dev/null +++ b/FileInclusion/pages/2.php @@ -0,0 +1,9 @@ + + +

+

Did you notice anything changed? Browse the site.

+ + + + + \ No newline at end of file diff --git a/FileInclusion/pages/dontOpen/hint1/hint1.php b/FileInclusion/pages/dontOpen/hint1/hint1.php new file mode 100644 index 0000000..255af07 --- /dev/null +++ b/FileInclusion/pages/dontOpen/hint1/hint1.php @@ -0,0 +1,7 @@ + + +

+

“ A day may come when the courage of men fails… but it is not this day. ”

+

You found one!!

+ + \ No newline at end of file diff --git a/FileInclusion/pages/lvl1.php b/FileInclusion/pages/lvl1.php new file mode 100644 index 0000000..a46ed83 --- /dev/null +++ b/FileInclusion/pages/lvl1.php @@ -0,0 +1,30 @@ + + + + + Level 1 + + + + + + + +

This is Level 1

+
+ + +
+ +
"; + + if (isset( $_GET[ 'file' ])) + { + @include($_GET[ 'file' ]); + echo"
".$_GET[ 'file' ]."
"; + } + ?> + + + diff --git a/FileInclusion/pages/lvl2.php b/FileInclusion/pages/lvl2.php new file mode 100644 index 0000000..cf0af27 --- /dev/null +++ b/FileInclusion/pages/lvl2.php @@ -0,0 +1,37 @@ + + + + + Level 2 + + + + + + + +

This is Level 2

+
+ + +
+ +
"; + + if (isset( $_GET[ 'file' ])) + { + $secure2 = $_GET[ 'file' ]; + + $secure2 = str_replace( array( "..\\" , ".\\", " ./", "../"),"", $secure2 ); + $secure2 = str_replace( array( "http://" , "https://" ) ,"" , $secure2 ); + + if (isset($secure2)) + { + @include($secure2); + echo"
".$secure2."
"; + } + } + ?> + + diff --git a/FileInclusion/pages/lvl3.php b/FileInclusion/pages/lvl3.php new file mode 100644 index 0000000..4cf8aa6 --- /dev/null +++ b/FileInclusion/pages/lvl3.php @@ -0,0 +1,42 @@ + + + + + Level 3 + + + + + + + +

This is Level 3

+ +
+ + +
+ +
"; + + if (isset( $_GET[ 'file' ])) + { + $secure3=$_GET[ 'file' ]; + $secure3=strtolower($secure3); + + $secure3=str_replace( array("http://", "https://") ,"" , $secure3); + $secure3=str_replace (array ( ":" , "/" , "..\\", "../" ), "" , $secure3); + + if (isset($secure3)) + { + include($secure3.".php"); + } + } + ?> + + + + + + diff --git a/FileInclusion/pages/lvl4.php b/FileInclusion/pages/lvl4.php new file mode 100644 index 0000000..bee2f93 --- /dev/null +++ b/FileInclusion/pages/lvl4.php @@ -0,0 +1,38 @@ + + + + + Level 4 + + + + + +

This is Level 4

+ +
+ + +
+ +
"; + + if (isset( $_GET[ 'file' ])) + { + $secure4 = $_GET[ 'file' ]; + + if ($secure4!="1.php" && $secure4!="2.php") + { + $secure4=substr($secure4, 0,-4); + } + + if (isset($secure4)) + { + include($secure4); + } + } + ?> + + + diff --git a/FileInclusion/pages/main.html b/FileInclusion/pages/main.html new file mode 100644 index 0000000..3b3e07b --- /dev/null +++ b/FileInclusion/pages/main.html @@ -0,0 +1,24 @@ + + + + + File Inclusion + + + +
+

File Inclusion

+
+
+ + + + + + +
+ + HummingbirdsCyberTeam + GaziCyber + + \ No newline at end of file