XXE-Lab/index.php at master · littlecutebird/XXE-Lab · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>XXE</title>
    <!-- Latest compiled and minified CSS -->
    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css">
     <!-- jQuery library -->
    <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
    <!-- Latest compiled JavaScript -->
    <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js"></script>
    <style>
    body {
        background-image: url('img/cloud.jpg');
        background-repeat: no-repeat;
        background-attachment: fixed;
        background-size: cover;
        /* color: white; */
    }
    /* CSS for table */
    table {
    font-family: arial, sans-serif;
    border-collapse: collapse;
    width: 100%;
    }

    th {
    background-color: #6c7ae0;
    }
    td, th {
    border: 1px solid #dddddd;
    text-align: left;
    padding: 8px;
    }

    tr:nth-child(even) {
    background-color: #F8F6FF;
    }
    tr:nth-child(odd) {
    background-color: #FFFFFF;
    }
    /* End CSS for table */
    </style>
</head>
<body>
    <nav class="navbar navbar-default">
    <div class="container-fluid">
        <div class="navbar-header">
        <a class="navbar-brand" href="#">Vulnerable Website</a>
        </div>
        <ul class="nav navbar-nav">
        <li><a href="index.php">Index</a></li>
        <li><a href="index.php?page=about.php">About</a></li>
        <li><a href="index.php?page=upload.php">Upload</a></li>
        <li><a href="index.php?page=upload_fixed.php">Safe Upload</a></li>
        </ul>
    </div>
    </nav>

    <div class="container">
    <?php
    if (isset($_GET["page"])) {
        // Solution for preventing LFI: whitelist all file can be included
        $whitelist = array('about.php' => 1, 'upload.php' => 2, 'upload_fixed.php' => 3);
        if (array_key_exists($_GET["page"], $whitelist) ) include('page/'.$_GET["page"]);
        else echo "<h2>Ain't been hacked anymore</h2>";
    }
    else echo '<h2>This is index page!</h2>';
    ?>

    <p>Use the contextual classes to provide "meaning through colors":</p>
    <p class="text-muted">This text is muted.</p>
    <p class="text-primary">This text is important.</p>
    <p class="text-success">This text indicates success.</p>
    <p class="text-info">This text represents some information.</p>
    <p class="text-warning">This text represents a warning.</p>
    <p class="text-danger">This text represents danger.</p>
    </div>

</div>

</body>
</html>