Use PHP Wrappers
reconchecklist
Summary
php://filter and data:// wrappers help when curl shows missing page sections or LFI is suspected.
Walkthrough
Use PHP stream wrappers to read source through an LFI or debug parameter. Decode base64 output offline to recover credentials or application logic.
Commands
bash
curl 'http://<IP>/admin/?debug=php://filter/convert.base64-encode/resource=index.php'