LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

Lfi Scan Tool

Local File Inclusion Enumeration (PoC)

OSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.

Brahmastra empowers security teams to fortify their defenses and identify potential vulnerabilities in their systems. This comprehensive tool ensures the utmost protection against cyber threats, making it an indispensable asset in the field of cybersecurity.

RayScan 1.0 — 开箱即用的 Web 漏洞扫描器 | SQL注入 / XSS / 命令注入 / LFI / SSRF / XXE / RCE / API安全 | 11个检测模块 | CLI + Web UI 双模式 | Metasploitable 2 实战验证发现83漏洞

🦖 PTScanner is a powerful tool for detecting Path Traversal and Local File Inclusion (LFI) vulnerabilities. developed as part of the ApachSAL project, it has been fully ported to Node.js, featuring significant enhancements and extended capabilities for modern penetration testing workflows.

This repository is a Dockerized php application containing a LFI (Local File Inclusion) vulnerability which can lead to RCE (Remote Code Execution).

LFI Finder

A automated penetration testing tool

Script to brute force a potential LFI vulnerability

Local File inclusion (LFI), or simply File Inclusion, refers to an inclusion attack through which an attacker can trick the web application into including files on the web server

confdedential lfi scanner with screenshot capture tool.

Sonatype Nexus Repository Manager 3 (LFI)

LFI Scanner (Nuclei + Python Runner) A scalable Local File Inclusion (LFI) scanning framework combining Nuclei’s detection accuracy with a Python-based CLI runner for real-time progress, payload timing, and clean hit logging. Designed and tuned specifically for Apache + mod_security environments, this setup supports thousands of external Payloads

🐍 Tool to find Local File Inclusion (LFI) vulnerabilities

A simple automation tool to detect LFI, RCE and SSTI vulnerability. Forked for PR and customization

LfiDump is a Python-based Local File Inclusion (LFI) vulnerability scanner that helps security professionals detect potential LFI vulnerabilities in web applications

Splunk-based SOC investigation uncovering a two-phase LFI exploitation and SSH compromise through cross-log correlation and threat analysis.

Oracle WebLogic Server (LFI)