File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

Lfi Scan Tool

A modern, browser-based reconnaissance dashboard built for security professionals and bug bounty hunters.

A web vulnerability scanner tool that detects XSS, SQL Injection, LFI, and Open Redirect. Instalations

This repository is a Dockerized php application containing a LFI (Local File Inclusion) vulnerability which can lead to RCE (Remote Code Execution).

Xninjaz is a powerful and versatile multi-vulnerability scanner designed to detect various web application vulnerabilities, including Local File Inclusion (LFI), Open Redirects (OR), SQL Injection (SQLi), and Cross-Site Scripting (XSS). This tool was created by Mr.X

Odoo 12.0 allows remote attackers to read local files.

Simple LFI Scanner

Script to brute force a potential LFI vulnerability

LFI Finder

Based on a list of payloads, XFI evaluate Local and Remote file inclusion on target web server

SQL XSS LFI Zafiyet Tespit Aracı

confdedential lfi scanner with screenshot capture tool.

Professional Web Vulnerability Scanner - Advanced XSS, SQL Injection, LFI, SSTI & Command Injection Detection for Bug Bounty Hunters & Security Professionals.

Sc4pihunt is a tool build in python for recon web. 🕸️

ScanShield is an advanced vulnerability scanner built to identify common web security flaws such as SQL Injection, XSS, LFI, RFI, directory listing issues, and security header misconfigurations.

🛡️ Scan for web vulnerabilities with HunterKit, a professional-grade tool designed for bug bounty hunters and security experts to enhance online safety.

🐍 Tool to find Local File Inclusion (LFI) vulnerabilities

This Python-based automated vulnerability testing tool is designed to help security enthusiasts and professionals identify potential security weaknesses in web applications. It performs various vulnerability tests, including XSS, RFI, LFI, CSRF, Subdomain Takeover, Clickjacking, SSRF, and more.