Local File Inclusion - System File Read

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•5

This rule detects attempts to exploit a Local File Inclusion (LFI) vulnerability to read the `/etc/passwd` file on a web server. It specifically looks for HTTP requests where the URI contains the string `/etc/passwd`.