lfi-detection

Lfi Scan Tool

LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

Local File Inclusion Enumeration (PoC)

OSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.

Brahmastra empowers security teams to fortify their defenses and identify potential vulnerabilities in their systems. This comprehensive tool ensures the utmost protection against cyber threats, making it an indispensable asset in the field of cybersecurity.

🦖 PTScanner is a powerful tool for detecting Path Traversal and Local File Inclusion (LFI) vulnerabilities. developed as part of the ApachSAL project, it has been fully ported to Node.js, featuring significant enhancements and extended capabilities for modern penetration testing workflows.

Dockerized PHP lab: exploit a Local File Inclusion (LFI) vulnerability and escalate it to Remote Code Execution (RCE).

LFI Finder

A automated penetration testing tool

Script to brute force a potential LFI vulnerability

Local File inclusion (LFI), or simply File Inclusion, refers to an inclusion attack through which an attacker can trick the web application into including files on the web server

confdedential lfi scanner with screenshot capture tool.

Sonatype Nexus Repository Manager 3 (LFI)

🐍 Tool to find Local File Inclusion (LFI) vulnerabilities

Splunk-based SOC investigation uncovering a two-phase LFI exploitation and SSH compromise through cross-log correlation and threat analysis.

Oracle WebLogic Server (LFI)

A simple automation tool to detect LFI, RCE and SSTI vulnerability. Forked for PR and customization

LFI Striker Updated (2026) is the premier utility for advanced file inclusion testing. Experience high-speed vulnerability scanning and fully optimized tools for elite web security and penetration audits.

poison.py - Tool to search for available log files for LFI/RFI vulnerabilities, and automatic escalation to RCE/Shell.

VulnPro is a Python-based vulnerability scanner and exploitation toolkit . It detects common web and system vulnerabilities like SQLi, XSS, LFI, and misconfigurations. Designed for ethical hackers, it streamlines recon, scanning, and PoC-based exploitation in one place.