W-LFILateral Movement

Local File Inclusion (LFI)

../../etc/passwd-style traversal in an include/require parameter — read source, configs, secrets.

§ Where this technique fits

W-LFI is catalogued under the Lateral Movement tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 1 on average.

§ Dossiers chaining this technique

LFI → log poisoning → RCE
Local file inclusion that reads the web server's access log. Send a request whose User-Agent contains PHP, then LFI the log file to execute it.
step 1 / 6

§ What commonly comes next

01
OS Command Injection
W-CMDI · Execution
seen 1×
02
Path Traversal
W-PATH-TRAVERSAL · Lateral Movement
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

LFI → log poisoning → RCE

§ What commonly comes next