diff --git a/lollms_core b/lollms_core index 8c40b159..7128493d 160000 --- a/lollms_core +++ b/lollms_core @@ -1 +1 @@ -Subproject commit 8c40b159c546c0d9a2e09b1659207b3f78043115 +Subproject commit 7128493d95a0c3b955ce36662228b74d7a8d8c2b diff --git a/tests/pentests/local_file_inclusion/lfi_test.py b/tests/pentests/local_file_inclusion/lfi_test.py new file mode 100644 index 00000000..fc5448c4 --- /dev/null +++ b/tests/pentests/local_file_inclusion/lfi_test.py @@ -0,0 +1,12 @@ +import requests + +# URL of your API endpoint +url = 'http://localhost:9600/user_infos/' + +# Attempt to access etc/passwd +payload = {'path': '../../../../etc/passwd'} + +response = requests.get(url, params=payload) + +print(f'Response status: {response.status_code}') +print(f'Response body: {response.text}')