BUG BOUNTY: BYPASSING WAF TO GET LFI (REAL TARGET) | 10K SPECIAL | 2023

Note: This video is only for educational purpose.
Learn cybersecurity from one of the best and affordable platform on the internet.
Securzy Official Website: securzy.io
Use Coupon FAIYAZ50 to get 50% discount on premium membership
Hi everyone! Learn how to bypass weak web application firewalls to get local file inclusion
Website: bepractical.tech
Telegram: telegram.me/be...
Previous Video: • BUG BOUNTY: FINDING LF...
Hacking Windows with Python from Scratch: www.udemy.com/...
The Ultimate Guide to Hunt Account Takeover:
www.udemy.com/...

[@mandikgoyal7740]

Very Informative Videos Keep up the good work

[@Th3-Noob-Audit0rs]

❤ hope your video's bypass UA-cam guidelines also

[@MohammedIrfanulIslam]

😂

[@FAHADKHATRI12]

This is valuable information!

[@Fractal_reComm]

Dude, I'm a big fan and I admire and inspire me, your work, I would like you to help me find simpler sites like this. Generally, my targets are very well protected, but it's possible to overcome them.
them and this takes much more time than in simpler systems, I have little experience but I have already found some cool vulnerabilities,
I still can't afford better education in cybersecurity, I would be very happy and I'm sure that the entire community that is also starting out would be very happy and would help a lot, thank you for everything, I hope you read it

[@user-eq1er5lh3d]

Congratulation on you 10000 subs!!!) You deserve MORE!!!!

[@zahiruddinahmad55]

Please make a video 403/404 bypass

[@ReligionAndMaterialismDebunked]

Yeee. More of these would be awesome. Hehe. I know we can add hostname:3000, and some stuff like that.

[@gauravkesharwani5557]

Great explanation bro. Many people teach if we want to check for such vulnerabilities we need to use payloads like ../../../../etc/passwd. However you shared another perspective - why to just try /etc/passwd, if we can check with other files within web root leading to source code reveal. Thanks for sharing this content

[@Deepakkumar-pm2kt]

Loved the video man. Learnt a lot from how your explanations.

[@islamkafafy6984]

Wow Dude you are amazing keep uploading top tier videos more

[@HunterX461]

Congratulations bro for 10k fam ❤🎉Next milestone is of 50k subs😊

[@abduls4479]

Awesome video.. thanks man

[@imran_hossain123]

Thanks from Bangladesh

[@user-wm5nx2qx4v]

you amazing man, thanks for the effort, you really work hard to give us the best content, and we appreciate it.

[@BePracticalTech]

Thank you

[@ReligionAndMaterialismDebunked]

Early crew. :3

[@hamzaannane885]

From 10k to 100k 🎉🎉🎉 one day

[@akashpatel-bs8ve]

Nice information, jump to 4:00 to main content 👍

[@MRIDULSG]

I have a question regarding this. What I understand is in LFI, you can actually execute the files on the server. In this case, the index.php file shall show the output of the executed version of the index.php file instead of showing the source code. In directory traversal, we can see the content of the file. Please Correct me if I'm wrong.

[@BePracticalTech]

Actually in local file inclusion, you will be able to see the contents of files present on the server. However, there are certain scenarios where you'll be able to execute the files(like you mentioned) but it depends from target to target.
The vulnerable endpoint here was actually serving the content of the pdf that's why we were able to get the content of source code.
Hope you understood

[@tanvirmridha]

😮

[@TechAmbition]

Bro targeting real host
*Only for educational purposes 😅

[@mnoobb69]

Where are you from bro?

[@BePracticalTech]

India

[@hamzaannane885]

Keep going 🎉🎉🎉 u are the best

[@Be_Buddhaa]

How many programming languages do you know?😢

[@BePracticalTech]

I know few programming languages

[@Be_Buddhaa]

@@BePracticalTech name please ?🥵🔥

[@oswardgaming3223]

Bro i am new in bug hunting so suggest me the right path for bug hunting

[@BePracticalTech]

Join our telegram community: telegram.me/bepracticaltech