LFI exploration files

Question

Hi,
i'm studding LFI issue due to a pratical test for a job.
So i'm trying to find key files to inject my commands.
Until now, i can enumerate this:

Files to inject:
- default webserver logs
- default daemons logs if world readable
- environ file at /proc

Files to get helpfull information
- locatedb file (no slocate, no mlocate) to get vhost and more logs
- some proc files

Some one could help me about more key files ? Injectable or not, maybe tricks to get vhost infos (without httpd.conf and localedb, course).

thanks friends.

Answer 1

I'm a big fan of the web fuzzing lists from the Fuzzdb:

http://code.google.com/p/fuzzdb/

http://code.google.com/p/fuzzdb/source/browse/#svn%2Ftrunk%2Fattack-payloads%2Flfi

 

also try this:

 

http://pastie.org/840199