--- title: "#lfi articles | Hashnode" description: "Explore 18 articles tagged #lfi on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/lfi" --- Tag # #lfi 18 posts · 3 followers [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Oct 7](https://hashnode.com/posts/tryhackme-seasurfer-writeup/6ac62062bef3e29f7cefc1f4) ### [TryHackMe - SeaSurfer writeup](https://exploitnotes.hashnode.dev/tryhackme-seasurfer-writeup?utm_source=hashnode&utm_medium=feed) Complete Sea Surfer TryHackMe writeup covering vhost enumeration, SSRF, LFI, WordPress RCE, tar wildcard injection, and SSH agent privilege escalation 15 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-seasurfer-writeup?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Jul 2](https://hashnode.com/posts/hackthebox-lustroustwo-writeup/6a45d90a6f669c47cd7c1c71) ### [HackTheBox: LustrousTwo Writeup](https://exploitnotes.hashnode.dev/hackthebox-lustroustwo-writeup?utm_source=hashnode&utm_medium=feed) Complete Lustrous2 HTB walkthrough covering Kerberos auth, LuShare LFI, S4U2self abuse, and SYSTEM via Velociraptor. 21 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/hackthebox-lustroustwo-writeup?utm_source=hashnode&utm_medium=feed) [Wiktoria Blomgren Strandberg](https://hashnode.com/@wikipedia01) · [May 5](https://hashnode.com/posts/file-inclusion/69fa3660a386d7f121c476a0) ### [File Inclusion in DVWA](https://pentesting-dvwa.hashnode.dev/file-inclusion?utm_source=hashnode&utm_medium=feed) Documented penetration test of the File Inclusion vulnerability in DVWA. 22 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/file-inclusion?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Mar 28](https://hashnode.com/posts/team-ctf-challenge-thm/69c80f147cf27065103f1775) ### [Team (CTF Challenge - THM)](https://www.sharonjebitok.com/team-ctf-challenge-thm?utm_source=hashnode&utm_medium=feed) nmap -p- -sV IP\_Address PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd 3.0.5 22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.13 (Ubuntu Linux; protocol 2.0) 80/tcp open http Apache h 8 min read · [sharonjebitok.com](https://www.sharonjebitok.com/team-ctf-challenge-thm?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Feb 20](https://hashnode.com/posts/speed-chatting/6998bfcda20b74e093d2be66) ### [Speed Chatting🎉🚩 - Unrestricted File Upload RCE (LFI)](https://www.sharonjebitok.com/speed-chatting?utm_source=hashnode&utm_medium=feed) Description Speed Chatting is an AI Security Challenge that was part of the Love at First Breach 2026, red team beginner’s CTF. It covers prompt injection and system configuration vulnerabilities in A 4 min read · [sharonjebitok.com](https://www.sharonjebitok.com/speed-chatting?utm_source=hashnode&utm_medium=feed) [s1de](https://hashnode.com/@s1de) · [Feb 8](https://hashnode.com/posts/archangel-writeup/6988fe7b8a97b4a4ce61e2c1) ### [Archangel Writeup: Log Poisoning and $PATH Hijacking on TryHackMe](https://s1de.hashnode.dev/archangel-writeup?utm_source=hashnode&utm_medium=feed) Master the Archangel CTF: Bypass LFI filters, execute RCE via Apache log poisoning, and hijack SUID $PATH for root privilege escalation. Step-by-step guide. 12 min read · [s1de.hashnode.dev](https://s1de.hashnode.dev/archangel-writeup?utm_source=hashnode&utm_medium=feed) [Mate Agulashvili](https://hashnode.com/@LGenAgul) · [Jan 19](https://hashnode.com/posts/lfi-rce-abusing-stream-wrappers-with-uploaded-microsoft-docx-files/696e915ed7af957b08d86f42) ### [LFI → RCE: Abusing Stream Wrappers with Uploaded Microsoft DOCX Files](https://noteshacking.hashnode.dev/lfi-rce-abusing-stream-wrappers-with-uploaded-microsoft-docx-files?utm_source=hashnode&utm_medium=feed) Using Microsoft documents and LFI to achieve RCE in PHP 7 min read · [noteshacking.hashnode.dev](https://noteshacking.hashnode.dev/lfi-rce-abusing-stream-wrappers-with-uploaded-microsoft-docx-files?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Jan 15](https://hashnode.com/posts/challenge-tokyo-ghoul-tryhackme/696909f00df4a0e609c1db51) ### [Challenge: Tokyo Ghoul (TryHackMe)](https://www.sharonjebitok.com/challenge-tokyo-ghoul-tryhackme?utm_source=hashnode&utm_medium=feed) Introduction Tokyo Ghoul CTF Challenge - A Complete Walkthrough This write-up documents my journey through the "Tokyo Ghoul" room on TryHackMe, a beginner-to-intermediate level capture-the-flag challenge inspired by the popular anime series. This roo... 9 min read · [sharonjebitok.com](https://www.sharonjebitok.com/challenge-tokyo-ghoul-tryhackme?utm_source=hashnode&utm_medium=feed) [Pradip Bhattarai](https://hashnode.com/@prdp1137) · [Aug 11, 2025](https://hashnode.com/posts/exploiting-an-lfi-vulnerability-and-forging-a-signature-in-bugcrowdctf/689a10eea0fcb9421c426377) ### [Exploiting an LFI Vulnerability and Forging a Signature in BugcrowdCTF](https://blog.pradeepbhattarai.me/exploiting-an-lfi-vulnerability-and-forging-a-signature-in-bugcrowdctf?utm_source=hashnode&utm_medium=feed) Guide to exploiting LFI vulnerabilities, forging signatures, reverse-engineering, and crafting a Python script in BugcrowdCTF 5 min read · [blog.pradeepbhattarai.me](https://blog.pradeepbhattarai.me/exploiting-an-lfi-vulnerability-and-forging-a-signature-in-bugcrowdctf?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Aug 8, 2025](https://hashnode.com/posts/challenges-archangel-tryhackme/68b1b01c65f31b8a21eeaf8c) ### [Challenges: Archangel (TryHackMe)](https://www.sharonjebitok.com/challenges-archangel-tryhackme?utm_source=hashnode&utm_medium=feed) The Archangel challenge simulated a real-world vulnerable web application environment where misconfigurations and insecure coding practices could be chained together for full system compromise. The target machine hosted multiple virtual hosts and dev... 6 min read · [sharonjebitok.com](https://www.sharonjebitok.com/challenges-archangel-tryhackme?utm_source=hashnode&utm_medium=feed)