Passwd Found in Requested URL

SOC170 — Passwd Found in Requested URL — Possible LFI Attack

What is Local File Inclusion?

• Local File Inclusion (LFI) is a type of vulnerability that allows an attacker to include a file, usually through a script on a web server by manipulating the parameters that reference these files an attacker can access arbitrary files on the server, including sensitive ones such as password file.

How to detect LFI attacks?

• Look for patterns in the URL …

blue team cybersecurity letsdefendio soc url web-attack