WHAT IS THIS

@declanmidd

40.0K followers · usually 2.5K views a post

Views

25.0K

Likes

859

Comments

13

Shares

19

Why it worked

The video demonstrates a common cybersecurity technique (LFI fuzzing) in a relatable way, showing both the process and the challenges encountered, which resonates with viewers interested in ethical hacking and cybersecurity.

Summary

The creator attempts to fuzz an endpoint using wordlists but fails to find anything. They then manually try to access the /etc/passwd file and consult PHP documentation on include methods.

Structure

1Attempt to fuzz endpoint
2Fail to find endpoint
3Consult PHP documentation
4Manually access /etc/passwd
5Discuss include methods

On-screen text

WHAT IS THIS LIKE LFI? NO, WE CAN, WE FUZZ THIS ENDPOINT WORD LISTS. UM, SHOULD WE DO INCLUDE LIKE THE PH P DOCS? OH, WHOA, OKAY. WOW. WAIT, WAIT? OKAY. DUDE, I JUST GUESSES IT. THE TOOL NOT FIND THE WHAT? THE TOOL DIDN'T EVEN FIND THE ENDPOINT. I'VE, I'VE USED MULTIPLE WORD LISTS AND IT DIDN'T FIND ANYTHING. THAT'S CRAZY, DUDE. THAT'S ACTUALLY CRAZY ANYWAYS. OKAY, SO JUST DID IT MANUALLY KIND OF JUST HALF, BE HONEST. UH, BECAUSE I THE PH OKAY, METHODS THAT WE SO LET'S, LET'S DO THE INCLUDE METHOD. UM, SO LIKE, LIKE IT SAYS THE PATH IS DEFINED WHERE THE ABSOLUTE

Original caption

Wasn’t expecting this to happen!! Educational only #CyberSecurity #infosec

More from @declanmidd

Their other posts in the index, biggest breakout first.

Transcript

WHAT IS THIS LIKE LFI? NO, WE CAN, WE FUZZ THIS ENDPOINT WORD LISTS. UM, SHOULD WE DO INCLUDE LIKE THE PH P DOCS? OH, WHOA, OKAY. WOW. WAIT, WAIT? OKAY. DUDE, I JUST GUESSES IT. THE TOOL NOT FIND THE WHAT? THE TOOL DIDN'T EVEN FIND THE ENDPOINT. I'VE, I'VE USED MULTIPLE WORD LISTS AND IT DIDN'T FIND ANYTHING. THAT'S CRAZY, DUDE. THAT'S ACTUALLY CRAZY ANYWAYS. OKAY, SO JUST DID IT MANUALLY KIND OF JUST HALF, BE HONEST. UH, BECAUSE I THE PH OKAY, METHODS THAT WE SO LET'S, LET'S DO THE INCLUDE METHOD. UM, SO LIKE, LIKE IT SAYS THE PATH IS DEFINED WHERE THE ABSOLUTE