Hello, everyone, and welcome to this video.
So in this video, we are going to learn about two categories of file inclusion, namely local and remote.
So before seeing this, let's recall when we learned about what is the difference between part traversal
and file inclusion based on realities in which we saw that if we are able to read any file from any
server, then it falls under pat traversal.
For example, if you are able to read a file, which is called letters file dot BHP, then it will fall
in that part traversal.
But in elfy or local file inclusion, you're able to read the file as well and you are able to execute
the file or execute the commands as well.
That's why we have seen that part traversal is a subset of local file inclusion that basically sums
up and summarizes to elfy equals part traversal plus execution.
All right.
So now let's see what is the difference between Elfy and Arafeh.
So as you can see on the left side of the screen, I have created a diagram and on to the right hand
side of the screen, I have again created a diagram for Al-Rifai.
Also, I have noted the very, very simplistic definition to understand this attack in which local file
inclusion or elfy means when any attacker is able to load files from the local server or the web application
itself and is also being able to execute commands, then the attacker has found how valid LFR one liability
under the right hand side.
If the attacker is able to load any files from any given remote server that he controls and is also
able to execute some specific command, then he has found a remote file inclusion vulnerability.
Now let's understand this more with the help of a diagram.
As you can see, this is the attacker and this is the target web application server.
So in Elfy, the attacker is going to read the files, for instance, file or BHB or ETEK past a bloody
file.
And the attacker is also able to execute a specific set of commands onto the target server to retrieve
the sensitive data.
On the right hand side, you can see the attacker is able to read the files as well as execute commands.
But the attacker is also being able to load specific files from any bad server, as you can see over
here, and the vulnerable web application or the server will successfully load the files and even execute
them.
This way, the attacker can run any files onto the bad server through a remotely configured bad server.
So this is the main difference between local file inclusion and remote file inclusion.
I hope you guys understood this.
Thank you.