https://mrbeetrootpwn.com/tags/lfi/Recent content in LFI on CyberSec WriteupsHugoen-usFri, 27 Feb 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-sniper/Fri, 27 Feb 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-sniper/Windows machine chaining PHP session poisoning for code execution, SMB-hosted RFI for a webshell, reused database credentials, and a malicious CHM help file for administrator.https://mrbeetrootpwn.com/write-ups/hackthebox/htb-nineveh/Thu, 12 Feb 2026 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-nineveh/Linux machine chaining an LFI-executed webshell (staged via phpLiteAdmin), a port-knocked SSH key hidden with steganography, and a chkrootkit cron exploit for root.https://mrbeetrootpwn.com/write-ups/hackthebox/htb-tabby/Fri, 28 Nov 2025 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-tabby/Linux machine using an LFI to leak Tomcat manager credentials for a WAR-based shell, cracking a reused backup password, and abusing LXD group membership to mount the host filesystem for root.https://mrbeetrootpwn.com/write-ups/hackthebox/htb-poison/Thu, 13 Nov 2025 00:00:00 +0000https://mrbeetrootpwn.com/write-ups/hackthebox/htb-poison/FreeBSD machine chaining an LFI-driven log poisoning webshell with a multiply-encoded backup password, then SSH port forwarding into a root-owned VNC session for root.