Looking for file inclusions

File inclusion vulnerabilities occur when developers use request parameters, which can be modified by users, to dynamically choose which pages to load or to include in the code the server will execute. Such vulnerabilities may cause a full system compromise if the server executes the included file.

In this recipe, we will test a web application to discover whether it is vulnerable to file inclusions.

How to do it...

We will use Damn Vulnerable Web Application (DVWA) for this recipe, so we need both the Kali and vulnerable virtual machines. Let's take a look at the following steps:

1. Log into DVWA and go to File Inclusion.
2. It says that we should edit the GET parameter page to test the inclusion...