LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

Lfi Scan Tool

Local File Inclusion Enumeration (PoC)

OSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.

Brahmastra empowers security teams to fortify their defenses and identify potential vulnerabilities in their systems. This comprehensive tool ensures the utmost protection against cyber threats, making it an indispensable asset in the field of cybersecurity.

This repository is a Dockerized php application containing a LFI (Local File Inclusion) vulnerability which can lead to RCE (Remote Code Execution).

A automated penetration testing tool

A small and fast bash script for automatic LFI vulnerability detection.

Script to brute force a potential LFI vulnerability

Midnight is bash script that conducts subdomain enumeration and attack surface mapping and then tests for XSS with payload injection and reflection verification, it also tests for local file inclusion and SQL injection with a comprehensive library of over 300 payloads.

confdedential lfi scanner with screenshot capture tool.

ScanShield is an advanced vulnerability scanner built to identify common web security flaws such as SQL Injection, XSS, LFI, RFI, directory listing issues, and security header misconfigurations.

LFI Finder

A simple automation tool to detect LFI, RCE and SSTI vulnerability. Forked for PR and customization

LfiDump is a Python-based Local File Inclusion (LFI) vulnerability scanner that helps security professionals detect potential LFI vulnerabilities in web applications

Sonatype Nexus Repository Manager 3 (LFI)

🐍 Tool to find Local File Inclusion (LFI) vulnerabilities

Oracle WebLogic Server (LFI)