LFISuite
LFISuite copied to clipboard
FEATURE REQUST
Can we make this tool take multiple urls at a time and aso suport post method switching and scan paths wothout parameters like for example example.com/archive/../../../../../etc/passwd like some lfi vulns can be found in paths frags without params
You can test POST params with lfimap. It also supports scan without parameter names.
POST test: python3 lfimap.py -U "http://vulnpage.com/endpoint" -D "postparam=PWN" -a
No param test: python3 lfimap.py -U "http://vulnpage.com/PWN" -a