Okay,,now we learn about privelege escalation. What is privelege escalation?
Privilege escalation is the act of
exploiting a bug, design flaw or configuration oversight in an
operating system or software application to gain elevated access to
resources that are normally protected from an application or user.
There
are two kinds of privilege escalation: Vertical and Horizontal.
- Vertical privilege escalation requires the attacker to grant himself higher privileges. This is typically achieved by performing kernel-level operations that allow the attacker to run unauthorized code.
- Horizontal privilege escalation requires the attacker to use the same level of privileges he already has been granted, but assume the identity of another user with similar privileges. For example, someone gaining access to another person's online banking account would constitute horizontal privilege escalation.
What is LFI? A local file inclusion (usually called “LFI”) is a webhacking technique that allow simply to include files from a local location. That means that we can include a file that is outside of the web directory (if we got rights), and execute PHP code.
