LFITester icon indicating copy to clipboard operation
LFITester copied to clipboard

LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

Results 10 LFITester issues
Sort by recently updated
recently updated
newest added

--mode was parsing integers. String is needed

is it possible to add custom payloads? i tried the -m flag but i am getting an error "invalid int value" . lfitester -u "http://domain.com/test.php?view=" -v --mode lfipayload.txt i have...

**Is your feature request related to a problem? Please describe.** Not Related to a problem. **Describe the solution you'd like** It would be a good idea to add an argument...

Add Double Encoded payloads and other type of encodings

The final result of the changes would be a program that is server-type independent for log poisoning vuln (all types of web servers will be served, not only nginx and...

Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.27 to 3.1.37. Release notes Sourced from gitpython's releases. 3.1.37 - a proper fix CVE-2023-41040 What's Changed Improve Python version and OS compatibility, fixing deprecations by @​EliahKagan...

dependencies

Bumps [requests](https://github.com/psf/requests) from 2.27.1 to 2.31.0. Release notes Sourced from requests's releases. v2.31.0 2.31.0 (2023-05-22) Security Versions of Requests between v2.3.0 and v2.30.0 are vulnerable to potential forwarding of Proxy-Authorization...

dependencies

Bumps [lxml](https://github.com/lxml/lxml) from 4.8.0 to 4.9.1. Changelog Sourced from lxml's changelog. 4.9.1 (2022-07-01) Bugs fixed A crash was resolved when using iterwalk() (or canonicalize()) after parsing certain incorrect input. Note...

dependencies

**Is your feature request related to a problem? Please describe.** The script currently only tests default vectors. There is a way to try and retrieve the log location to poison....