File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

Lfi Scan Tool

A web vulnerability scanner tool that detects XSS, SQL Injection, LFI, and Open Redirect. Instalations

A modern, browser-based reconnaissance dashboard built for security professionals and bug bounty hunters.

Xninjaz is a powerful and versatile multi-vulnerability scanner designed to detect various web application vulnerabilities, including Local File Inclusion (LFI), Open Redirects (OR), SQL Injection (SQLi), and Cross-Site Scripting (XSS). This tool was created by Mr.X

Odoo 12.0 allows remote attackers to read local files.

This repository is a Dockerized php application containing a LFI (Local File Inclusion) vulnerability which can lead to RCE (Remote Code Execution).

Simple LFI Scanner

LFI Finder

Script to brute force a potential LFI vulnerability

🛡️ Scan for web vulnerabilities with HunterKit, a professional-grade tool designed for bug bounty hunters and security experts to enhance online safety.

Based on a list of payloads, XFI evaluate Local and Remote file inclusion on target web server

SQL XSS LFI Zafiyet Tespit Aracı

confdedential lfi scanner with screenshot capture tool.

Professional Web Vulnerability Scanner - Advanced XSS, SQL Injection, LFI, SSTI & Command Injection Detection for Bug Bounty Hunters & Security Professionals.

Sc4pihunt is a tool build in python for recon web. 🕸️

This Python-based automated vulnerability testing tool is designed to help security enthusiasts and professionals identify potential security weaknesses in web applications. It performs various vulnerability tests, including XSS, RFI, LFI, CSRF, Subdomain Takeover, Clickjacking, SSRF, and more.

🐍 Tool to find Local File Inclusion (LFI) vulnerabilities

LFI Scanner (Nuclei + Python Runner) A scalable Local File Inclusion (LFI) scanning framework combining Nuclei’s detection accuracy with a Python-based CLI runner for real-time progress, payload timing, and clean hit logging. Designed and tuned specifically for Apache + mod_security environments, this setup supports thousands of external Payloads