Sunday, December 5, 2021

A Multi-Perspective View of PHP Remote File Include Attacks

SecureWorks/SANS Institute: The log files of nearly every production Web server bear the marks of attempted remote file include (RFI) attacks. While they’re often disregarded as mere nuisances, these attacks do pose a threat.

This white paper describes the mechanics of a RFI attack, explains how to detect an attack, examines the threat landscape, and proposes mitigation techniques.

Similar articles

Latest Articles