Projects in Awesome Lists tagged with lfi

https://github.com/1n3/blackwidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

active application automated bugbounty csrf fuzzer lfi osint owasp passive python rce rfi scan scanner spider sqli vulnerability web xss

Last synced: 13 Apr 2025

https://github.com/1N3/BlackWidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

active application automated bugbounty csrf fuzzer lfi osint owasp passive python rce rfi scan scanner spider sqli vulnerability web xss

Last synced: 30 Mar 2025

https://github.com/v3n0m-scanner/v3n0m-scanner

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

aiohttp asyncio blackarch cloudflare d0rk dns exploit ftp hacking lfi metasploit pentesting python3 scanner sqli toxin trawling vulnerability vulnerability-scanners xss

Last synced: 15 May 2025

https://github.com/v3n0m-Scanner/V3n0M-Scanner

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

aiohttp asyncio blackarch cloudflare d0rk dns exploit ftp hacking lfi metasploit pentesting python3 scanner sqli toxin trawling vulnerability vulnerability-scanners xss

Last synced: 30 Mar 2025

https://github.com/alisamtechnology/atscan

Advanced dork Search & Mass Exploit Scanner

data dork engine exploitation lfi linux mass-exploitation-scanner ports portscan rfi scanner security server shell sqli system tools vulnerability-scanners web-application xss

Last synced: 07 Apr 2025

https://github.com/AlisamTechnology/ATSCAN

Advanced dork Search & Mass Exploit Scanner

data dork engine exploitation lfi linux mass-exploitation-scanner ports portscan rfi scanner security server shell sqli system tools vulnerability-scanners web-application xss

Last synced: 26 Mar 2025

https://github.com/nemesida-waf/waf-bypass

Check your WAF before an attacker does

api-security-testing bypass graphql-injection lfi nosql-injection path-traversal python python3 rce rfi sqli-injection ssti waf waf-bypass-tool waf-testing xss

Last synced: 14 May 2025

https://github.com/mzfr/liffy

Local file inclusion exploitation tool

hac hacktoberfest lfi lfi-exploitation local-file-inclusion reverse-shell

Last synced: 05 Apr 2025

https://github.com/payloadbox/rfi-lfi-payload-list

🎯 RFI/LFI Payload List

application-security appsec bug-bounty bugbounty lfi lfi-exploitation lfi-vulnerability payload payload-list payloads rfi rfi-exploiton rfi-vulnerabillity security security-research security-researcher security-researchers web-application-security web-hacking websecurity

Last synced: 05 Mar 2025

https://github.com/abhisharma404/vault

swiss army knife for hackers

crawler fuzzing hacking hacking-tool information-gathering lfi networking offensive-security osint pentesting port-scanner python rfi scanner scrapy security sqlite ssl-inspection vault xss-vulnerability

Last synced: 02 Apr 2025

https://github.com/swisskyrepo/DamnWebScanner

Another web vulnerabilities scanner, this extension works on Chrome and Opera

extension lfi plugin polyglot-vector rce scans sql-injection web-vulnerabilities-scanner webbrowser xss-vulnerability

Last synced: 11 Jul 2025

https://github.com/swisskyrepo/damnwebscanner

Another web vulnerabilities scanner, this extension works on Chrome and Opera

extension lfi plugin polyglot-vector rce scans sql-injection web-vulnerabilities-scanner webbrowser xss-vulnerability

Last synced: 05 Apr 2025

https://github.com/anmolksachan/TheTimeMachine

Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not

automate bugbounty fuzzer fuzzing jira lfi openredirect osint parameter scanner xss

Last synced: 07 Sep 2025

https://github.com/pikpikcu/XRCross

bugbounty bugbounty-tool check-subdomains cors cors-scanner lfi rce recon scanners sqli ssrf subdomain-enumeration takeover-subdomain xss-scanner xss-vulnerability

Last synced: 12 Jul 2025

https://github.com/hansmach1ne/lfimap

Local File Inclusion discovery and exploitation tool

command-injection exploitation lfi lfi-exploitation local-file-inclusion penetration-testing pentesting python3 remote-code-execution remote-file-inclusion rfi web-application

Last synced: 15 May 2025

https://github.com/chrispetrou/FDsploit

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

directory-traversal directory-traversal-vulnerability enumeration exploitation file-include fuzzing hacking inclusion lfi lfi-shells lfi-vulnerability oscp owasp path-traversal penetration-testing pentesting rfi security security-tools web-security

Last synced: 02 Apr 2025

https://github.com/VainlyStrain/Vailyn

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

directory-traversal exploitation filter-evasion information-leak lfi lfi-exploitation lfi-shells local-file-inclusion path-traversal penetration-testing pentest-tool pentesting rce security takeover vulnerability-assessment vulnerability-detection vulnerability-scanners websec websecurity

Last synced: 11 Jul 2025

https://github.com/angelsecurityteam/sqlidumper-angelsecurityteam

Dork Search , Vulnerability Scanner ,SQL Injection , XSS , LFI ,RFI

database keyword-dork lfi mysql oracle rfi sqlinjection xss

Last synced: 21 Aug 2025

https://github.com/dotPY-hax/gitlab_RCE

RCE for old gitlab version <= 11.4.7 & 12.4.0-12.8.1 and LFI for old gitlab versions 10.4 - 12.8.1

ctf cve cve-2018-19571 cve-2018-19585 cve-2020-10977 exploit gitlab gitlab-rce lfi rce

Last synced: 12 Jul 2025

https://github.com/kostas-pa/LFITester

LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

bugbounty crawler cybersecurity enumeration exploitation fuzzing hacking lfi lfi-detection lfi-exploitation lfi-vulnerability penetration-testing penetration-testing-tools pentest-tool pentesting python web-hacking webhacking

Last synced: 12 Jul 2025

https://github.com/ronin-rb/ronin-vulns

Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects.

hacktoberfest lfi open-redirect pentest-tool pentesting rfi ronin-rb ruby security sql-injection sqli ssti vulnerability-detection vulnerability-scanners web-security xss

Last synced: 05 Apr 2025

https://github.com/mr-xn/thinkphp_lang_rce

about thinkphp lang RCE QVD-2022-46174 v6.0.1 <= Thinkphp <= v6.0.13 Thinkphp v5.0.x Thinkphp v5.1.x

lfi rce thinkphp thinkphp5 thinkphp6

Last synced: 22 Mar 2025

https://github.com/farinap5/webpwn

Web Vulnerability Detector (XSS,SQL,LFI,XST,WAF)

lfi lfi-exploitation pentesting python sqli-pentester sqli-vulnerability-scanner sqlinjection waf-detection webpwn xss-attacks xss-detection xss-exploitation xss-vulnerability xst

Last synced: 05 Sep 2025

https://github.com/AmoloHT/TTWAF

「🧱」Test a list of payloads and see if you can bypass it

application bugbounty bugbounty-tool bypass firewall lfi payload rce rust sqli test waf xss

Last synced: 10 Mar 2025

https://github.com/christophe77/express-honeypot

Express honeypot for remote file inclusion (RFI) and local file inclusion (LFI).

exploit express honeypot lfi nodejs rfi

Last synced: 12 May 2025

https://github.com/s1lkys/auto_lfi

A simple Script which tests for LFI (Local File Inclusion) via Curl

curl lfi lfi-exploitation local-file-inclusion

Last synced: 13 Aug 2025

https://github.com/machine1337/lfiscan

A small and fast bash script to automate LFI vulnerability.

bugbounty hacking lfi lfi-exploitation machine1337 shell

Last synced: 20 Jul 2025

https://github.com/r3li4nt/lfiscanner

Local File Inclusion (LFI) scanner.

lfi linux python scanner vulnerability-scanners

Last synced: 08 Mar 2026

https://github.com/abaykan/Labs

Repositori ini berisi file-file vulnerable terhadap bug tertentu yang saya jadikan demo pada artikel yang saya tulis di abaykan.com

bug bug-bounty bugbounty bugs command-injection hack hacking lab labs lfi local-file-inclusion writeup xss

Last synced: 10 Mar 2025

https://github.com/ishanoshada/lfi

A side note about LFI and Leaking the php source of some sites

blue-team cyber-security cybersecurity lfi owasp web-attack

Last synced: 10 Apr 2025

https://github.com/daedalus/paranoicscan

csrf exploit-db fingerprinting lfi mysql-manager portscanner xss

Last synced: 26 Oct 2025

https://github.com/mathis2001/lightraversal

LighTraversal is a tool designed to find basic directory traversal vulnerabilities

bugbounty lfi path-traversal pentest

Last synced: 15 Jun 2025

https://github.com/alp55/vulnerability-scan-tool-sql-xss-lfi

SQL XSS LFI Zafiyet Tespit Aracı

lfi lfi-vulnerability pyqt5 python scanner sql sql-vulnerability-scanner vulnerability vulnerability-scanners xss xss-vulnerability

Last synced: 09 Apr 2025

https://github.com/fazlearefin/magic-bitten-file

Evade file content checks by prepending magic bytes to any file

ctf file-signature kali lfi magic-bytes python

Last synced: 08 Jul 2025

https://github.com/vandycknick/gitlab-cve-2020-10977

GitLab Arbitrary File Read Exploit

cve-2020-10977 exploit gitlab lfi python rce

Last synced: 17 May 2026

https://github.com/brokensound77/lfi_injector

Local File Inclusion

lfi

Last synced: 31 Jul 2025

https://github.com/prokunal/webthemez-lfi

LFI on WebThemez CMS.

ctf ctflfi lfi webthemez webthemezexploit webthemezlfi webthemezlfiexploit webthemezlfigithub

Last synced: 16 Sep 2025

https://github.com/xalgord/lfigo

A faster LFI Fuzzer.

bug-bounty directory-traversal lfi

Last synced: 08 Oct 2025

https://github.com/hackfutsec/lfidump

LfiDump is a Python-based Local File Inclusion (LFI) vulnerability scanner that helps security professionals detect potential LFI vulnerabilities in web applications

cybersecurity injection lfi lfi-detection lfi-exploit lfi-exploitation lfi-injection lfi-vulnerability linux-t payload payload-generator payloadtransformer pentesting python script tools web-application-testing windows-tools