Advanced LFI - Part 8 - Executing PHP through auth.log

This time we abuse the fact that the apache auth.log file executes any code inside it every time its updated. We create an ssh username that requests the standard phpinfo file and we see the file executed in the browser - via Burp Suite.