lfi-exploitation

Waymap is a fast and optimized web vulnerability scanner built for penetration testers. It helps in identifying vulnerabilities by testing against various payloads.

python scanner hacking waf command-line-tool bypass sqlmap exploitation-framework xss-detection sql-scanner sqlinjection command-injection lfi-exploitation ssti open-redirect-detection sqli-scanner command-injection-scanner waymap trixsec website-hacking-tool

UpdatedOct 12, 2025
Python

verylazytech /CVE-2024-10914

Star46

POC - CVE-2024–10914- Command Injection Vulnerability in `name` parameter for D-Link NAS

poc lfi lfi-exploitation rce-exploit unauthenticated-rce cve-2024-10914 d-link-nas

UpdatedNov 27, 2024
PowerShell

farinap5 /webpwn

Star26

Web Vulnerability Detector (XSS,SQL,LFI,XST,WAF)

python xss-vulnerability pentesting sqli-vulnerability-scanner xss-exploitation xss-detection xss-attacks lfi xst sqlinjection lfi-exploitation waf-detection sqli-pentester webpwn

UpdatedDec 8, 2020
Python

BoxingOctopusCreative /toxin

Star17

LFI (Local File Inclusion) Exploitation Tool

python requests click security-tools lfi-exploitation local-file-inclusion

UpdatedJan 4, 2021
Python

S1lkys /Auto_LFI

Star15

A simple Script which tests for LFI (Local File Inclusion) via Curl

curl lfi lfi-exploitation local-file-inclusion

UpdatedMar 11, 2019
Shell

moeinfatehi /lfi-to-rce-scenario

Star12

This repository is a Dockerized php application containing a LFI (Local File Inclusion) vulnerability which can lead to RCE (Remote Code Execution).

owasp rce application-security lfi owasp-top-10 command-injection lfi-labs lfi-exploitation local-file-inclusion lfi-vulnerability os-command-injection remote-command-execution lfi-detection lfi-rce lfi-exploit lfi-to-rce lfi-to-shell lfi-scenario lfi-challenge

UpdatedJun 16, 2022
PHP

root4031 /lfiscan

Star11

A small and fast bash script to automate LFI vulnerability.

shell hacking bugbounty lfi lfi-exploitation machine1337

UpdatedNov 21, 2022
Shell

codexlynx /nayra

Star10

LFI Exploitation Tool

hacking web-security msfvenom webshell red-team lfi-exploitation

UpdatedMar 26, 2017
Python

🦖 PTScanner is a powerful tool for detecting Path Traversal and Local File Inclusion (LFI) vulnerabilities. developed as part of the ApachSAL project, it has been fully ported to Node.js, featuring significant enhancements and extended capabilities for modern penetration testing workflows.

vulnerability-detection directory-traversal lfi-exploitation lfi-detection path-traversal-exploitation ptscanner

UpdatedJul 24, 2025
JavaScript

verylazytech /CVE-2024-50623

Star8

CVE-2024-50623 POC - Cleo Unrestricted file upload and download

file-upload cleo lfi-exploitation rce-exploit cve-2024-50623

UpdatedDec 23, 2024
Shell

verylazytech /CVE-2024-9935

Star7

PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Unauthenticated Arbitrary File Download

wordpress-plugin lfi elementor-page-builder lfi-exploitation cve-2024-9935 unauthenticated-arbitrary-file-download

UpdatedDec 19, 2024
Shell

Ap1311 /SQL-LFI_Scanner

Star7

SQLi & LFI Scanner is a powerful security testing tool designed to detect SQL Injection (SQLi) vulnerabilities and Local File Inclusion (LFI) flaws in web applications. It helps ethical hackers and security researchers identify security weaknesses efficiently.

sql-injection sqlmap sql-scanner lfi lfi-exploitation lfi-vulnerability bugbounty-tool lfi-detection lfi-exploit lfi-scanner aarav ap1311 aarav-programmers sql-bug-scanner sql-lfi-scanner sql-lfi