lfi

There are 7 repositories under lfi topic.

1N3 / BlackWidow
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
web application scanner osint fuzzer owasp vulnerability python spider passive active sqli xss lfi rfi rce csrf automated scan bugbounty
Language:Python 1485
v3n0m-Scanner / V3n0M-Scanner
Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
python3 asyncio lfi sqli xss scanner metasploit blackarch cloudflare hacking pentesting d0rk exploit ftp dns vulnerability vulnerability-scanners trawling toxin aiohttp
Language:Python 1440
AlisamTechnology / ATSCAN
Advanced dork Search & Mass Exploit Scanner
dork server engine scanner xss lfi rfi ports exploitation sqli data vulnerability-scanners system security tools linux portscan shell web-application mass-exploitation-scanner
Language:Perl 1360
nemesida-waf / waf-bypass
Check your WAF before an attacker does
waf python3 bypass python rce xss waf-bypass-tool api-security-testing lfi nosql-injection path-traversal rfi sqli-injection graphql-injection ssti waf-testing
Language:Python 1162
mzfr / liffy
Local file inclusion exploitation tool
lfi lfi-exploitation reverse-shell local-file-inclusion hac hacktoberfest
Language:Python 744
payloadbox / rfi-lfi-payload-list
🎯 RFI/LFI Payload List
application-security appsec bug-bounty bugbounty lfi lfi-exploitation lfi-vulnerability payload payload-list payloads rfi rfi-exploiton rfi-vulnerabillity security security-research security-researcher security-researchers web-application-security web-hacking websecurity
516
abhisharma404 / vault
swiss army knife for hackers
crawler fuzzing hacking hacking-tool information-gathering lfi networking offensive-security osint pentesting port-scanner python rfi scanner scrapy security sqlite ssl-inspection vault xss-vulnerability
Language:Python 502
swisskyrepo / DamnWebScanner
Another web vulnerabilities scanner, this extension works on Chrome and Opera
sql-injection polyglot-vector web-vulnerabilities-scanner plugin extension webbrowser xss-vulnerability rce lfi scans
Language:Python 437
pikpikcu / XRCross
XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities
bugbounty bugbounty-tool xss-vulnerability ssrf xss-scanner subdomain-enumeration takeover-subdomain rce sqli cors lfi recon scanners check-subdomains cors-scanner
Language:Shell 323
paralax / lfi-labs
small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns
rfi cmd-injection-vulns lfi-labs lfi command-injection education rfi-labs
Language:PHP 314
chrispetrou / FDsploit
File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.
exploitation enumeration owasp security-tools lfi rfi directory-traversal path-traversal web-security security oscp fuzzing file-include lfi-shells lfi-vulnerability inclusion directory-traversal-vulnerability penetration-testing pentesting hacking
Language:Python 263
anmolksachan / TheTimeMachine
Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not
osint fuzzing parameter bugbounty automate xss lfi jira openredirect scanner fuzzer
Language:Python 257
Egyscan
dragonked2 / Egyscan
Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:
cybersecurity scanner vulnerability-scanners command-line cross-site-scripting injection python rce remote sqlinjection vulnerability vulnerability-detection xss sql-injection-remote-code-execution-cross-site remote-code-execution sql-injection command-injection lfi ssrf xxe-injection
Language:Python 225
hansmach1ne / LFImap
Local File Inclusion discovery and exploitation tool
lfi web-application exploitation local-file-inclusion python3 rfi command-injection remote-code-execution lfi-exploitation remote-file-inclusion penetration-testing pentesting
Language:Python 198
Vailyn
VainlyStrain / Vailyn
A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
websecurity information-leak exploitation vulnerability-scanners directory-traversal path-traversal pentest-tool websec vulnerability-assessment penetration-testing filter-evasion vulnerability-detection pentesting lfi lfi-shells lfi-exploitation security local-file-inclusion rce takeover
Language:Python 191
dotPY-hax / gitlab_RCE
RCE for old gitlab version <= 11.4.7 & 12.4.0-12.8.1 and LFI for old gitlab versions 10.4 - 12.8.1
ctf cve cve-2018-19571 cve-2018-19585 cve-2020-10977 exploit gitlab gitlab-rce lfi rce
Language:Python 157
AngelSecurityTeam / SQLiDumper-AngelSecurityTeam
Dork Search , Vulnerability Scanner ,SQL Injection , XSS , LFI ,RFI
sqlinjection lfi rfi xss database mysql keyword-dork oracle
148
storenth / lazyrecon
Wicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion.
vulnerability-scanner security-automation reconnaissance bugbounty ssrf lfi sqli osint bhusa arsenal infosec fuzzing recon
Language:Shell 139
capture0x / Lfi-Space
Lfi Scan Tool
lfi lfi-detection lfi-vulnerability
Language:Python 100
kostas-pa / LFITester
LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.
python lfi-detection pentest-tool exploitation cybersecurity penetration-testing-tools lfi-exploitation lfi-vulnerability crawler hacking lfi bugbounty enumeration fuzzing web-hacking webhacking penetration-testing pentesting
Language:Python 96
thehackersbrain / CVE-2021-41773
Apache2 2.4.49 - LFI & RCE Exploit - CVE-2021-41773
apache2 rce lfi exploit python cve-2021-41773 thehackersbrain gauravraj
Language:Python 93
smsharma / awesome-neural-sbi
Community-sourced list of papers and resources on neural simulation-based inference.
sbi simulation-based-inference neural-simulation-based-inference lfi likelihood-free-inference
74
0bfxgh0st / lfienum
Local File Inclusion Enumeration (PoC)
lfienum local-file-inclusion-enumeration local-file-inclusion local-file-inclusion-enumerator lfi lfi-detection
Language:Python 59
ronin-vulns
ronin-rb / ronin-vulns
Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects.
rfi ronin-rb ruby lfi vulnerability-detection sql-injection sqli xss open-redirect ssti pentest-tool pentesting security vulnerability-scanners hacktoberfest web-security
Language:Ruby 56
Stuub / CVE-2024-4040-SSTI-LFI-PoC
CVE-2024-4040 CrushFTP SSTI LFI & Auth Bypass | Full Server Takeover | Wordlist Support
crushftp cve lfi owasp python rce sftp cve-2024-4040 cve2024-4040 0day cve-2024-4040-poc arbitrary-file-read cve-2024-4040-exploit crushftp0day
Language:Python 51
Sybil-Scan / imagemagick-lfi-poc
ImageMagick LFI PoC [CVE-2022-44268]
cve-2022-44268 imagemagick lfi
Language:Python 49
iilegacyyii / PoC-CVE-2021-41773
apache cve lfi poc rce
Language:Python 48
TTWAF
AmoloHT / TTWAF
「🧱」Test a list of payloads and see if you can bypass it
bypass waf bugbounty bugbounty-tool payload xss firewall lfi rce sqli test application rust
Language:Rust 44
DevanshRaghav75 / AutomationGuide
Learn how to automate XSS, SSRF, LFI, SQLI, NoSQLi
xss sql-injection ssrf nosql-injection lfi automation bugbounty
32
jpiechowka / zip-shotgun
Utility script to test zip file upload functionality (and possible extraction of zip files) for vulnerabilities (aka Zip Slip)
security-tools zip pentesting hacking lfi zip-shotgun hacking-tool security security-testing zip-slip
Language:Python 31
Mr-xn / thinkphp_lang_RCE
about thinkphp lang RCE QVD-2022-46174 v6.0.1 <= Thinkphp <= v6.0.13 Thinkphp v5.0.x Thinkphp v5.1.x
lfi rce thinkphp thinkphp5 thinkphp6
31
aryanrtm / Crascan
Crascan is a simple LFI, RFI, RCE, and Joomla Components vulnerability scanner.
vulnerability-scanner rfi lfi rce pentesting exploit admin-finder shell shell-backdoor
Language:Shell 30
PinoyWH1Z / SSH-Private-Key-Looting-Wordlists
SSH Private Key Looting Wordlists. A collection of wordlists to aid in locating or brute-forcing SSH private key file names.
brute-force cybersecurity enumeration hacking lateral lfi password-cracking pentesting pivot security ssh ssh-keys wordlist
29
TheHermione / DorkFinder
Automatic tool to find Google Dorks
data dork dorks exploitation lfi linux rfi scanner security security-audit server sqli system tools vulnerability-scanners web-application xss dork-finder dork-scanner dorking
Language:Python 26
farinap5 / webpwn
Web Vulnerability Detector (XSS,SQL,LFI,XST,WAF)
xss-exploitation xss-vulnerability xss-detection xss-attacks sqlinjection sqli-vulnerability-scanner sqli-pentester python pentesting lfi lfi-exploitation waf-detection xst webpwn
Language:Python 23
treddis / dotdotfarm
Fast Path Traversal exploitation tool
appsec fuzzer python security web pentesting path-traversal lfi
Language:Python 21