🎯 RFI/LFI Payload List

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

Lfi Scan Tool

This repository is a Dockerized php application containing a LFI (Local File Inclusion) vulnerability which can lead to RCE (Remote Code Execution).

Odoo 12.0 allows remote attackers to read local files.

Xninjaz is a powerful and versatile multi-vulnerability scanner designed to detect various web application vulnerabilities, including Local File Inclusion (LFI), Open Redirects (OR), SQL Injection (SQLi), and Cross-Site Scripting (XSS). This tool was created by Mr.X

Simple LFI Scanner

A small and fast bash script for automatic LFI vulnerability detection.

Script to brute force a potential LFI vulnerability

ScanShield is an advanced vulnerability scanner built to identify common web security flaws such as SQL Injection, XSS, LFI, RFI, directory listing issues, and security header misconfigurations.

SQL XSS LFI Zafiyet Tespit Aracı

This Python-based automated vulnerability testing tool is designed to help security enthusiasts and professionals identify potential security weaknesses in web applications. It performs various vulnerability tests, including XSS, RFI, LFI, CSRF, Subdomain Takeover, Clickjacking, SSRF, and more.

confdedential lfi scanner with screenshot capture tool.

Based on a list of payloads, XFI evaluate Local and Remote file inclusion on target web server

LFI Finder

A web crawler and vulnerability scanner tool developed by Rohit Ajariwal

LFIvader Um scanner avançado para detecção de vulnerabilidades do tipo Local File Inclusion (LFI). Desenvolvido em C, o LFIvader combina eficiência e precisão para identificar falhas em servidores web, apresentando resultados organizados e salvos automaticamente para análise detalhada. 🚀

LfiDump is a Python-based Local File Inclusion (LFI) vulnerability scanner that helps security professionals detect potential LFI vulnerabilities in web applications

brute force LFI using python