LFI/RFI

Linux

LFI - Interesting Directories

/etc/passwd
/etc/shadow
/etc/issue
/etc/group
/etc/hostname

/var/log/apache/access.log
/var/log/apache2/access.log
/var/log/httpd/access_log
/var/log/apache/error.log
/var/log/apache2/error.log
/var/log/httpd/error_log
/var/log/messages
/var/log/cron.log
/var/log/auth.log

/var/www/html/wp-config.php <- Wordpress
/var/www/configuration.php <- Joomla
/var/www/html/inc/header.inc.php <- Dolphin
/var/www/html/sites/default/settings.php <- Drupal
/var/www/configuration.php <- Mambo
/var/www/config.php <- PHP

Windows

LFI - Interesting Directories

C:/Windows/System32/drivers/etc/hosts
C:/Windows/Panther/Unattend/Unattended.xml
C:/Windows/Panther/Unattended.xml
C:/Windows/Panther/Unattended.txt
C:/Unattended.xml
C:/Autounattended.xml
C:/Windows/System32/sysprep

C:/inetpub/wwwroot
C:/inetpub/wwwroot/web.config
C:/inetpub/logs/logfile

RFI - Examples