This whitepaper discusses getting a shell via local file inclusion using the proc/self/environ method.
You can download it from the following link: https://packetstormsecurity.com/files/download/80068/shell-lfi.txt
Source: https://packetstormsecurity.com/files/80068/Whitepaper-Getting-A-Shell-Via-LFI.html