Waraxe IT Security Portal

Cablekid · Advanced user

Okay so give me your idea's.

The site is basically set up like this.

http://www.site.com/viewimage/http://www.linkto/image.gif

And it takes that and puts that in the html image code and shows the image on the page.

any ideas?

zellfaze · Beginner

You might be able to use that to view files on his site. If his script uses fopen() to get the image and proxy it back to your browser you might be able to do something like http://www.site.com/viewimage/%2E%2E%2Fconfig.php

Then again, I could be misunderstanding what your saying. Or his site might be protected against an attack like that.