File Inclusion

☐ Determine the webserver, eg: nginx, apache etc.
☐ Check basic path traversal payloads in possible parameters
☐ Fuzz for PHP files
☐ Fuzz the paramters for these PHP files
☐ Test common payloads against there paramters
☐ After finding payload that works, include a file to verify
☐ Look at the source code of all the PHP files found above
☐

☐ Extract config file
☐ If allow_url_include is on:
   ☐ f
   ☐ f
☐ If allow_url_include is off:
   ☐