Linux
/proc/X/root symlink
Every process subdirectory of /proc
contains a file root
pointing to the filesystem root. For instance
/proc/1/root
will point to /
. This also works with /proc/self/root
. This symlink can be used to bypass filters
and blacklists for LFI. A path to read /etc/hosts
might look like this: /proc/self/root/etc/hosts
.