Advanced Tool To Scan And Exploit Local File Inclusion (LFI) Vulnerabilities
☆43Mar 24, 2026Updated 7 months ago
Alternatives and similar repositories for LFIHunt
Users that are interested in LFIHunt are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Exploit for the unauthenticated file upload vulnerability in WordPress's Royal Elementor Addons and Templates plugin (< 1.3.79). CVE-ID: …☆10Nov 2, 2023Updated 3 years ago
- ☆12Dec 8, 2025Updated 10 months ago
- MajorDoMo Unauthenticated RCE: Deep Dive & Exploitation Techniques☆15Dec 18, 2023Updated 2 years ago
- AI-Powered Wordlist Generator & Target Recon Tool - Replaces CeWL + CUPP + trufflehog in a single Go binary☆14Oct 15, 2026Updated 2 weeks ago
- A standalone collection of widely used technologies with default credentials enabled, which can be utilized for establishing an initial f…☆21Jun 1, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- List of custom Nuclei templates☆16Nov 4, 2023Updated 2 years ago
- Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution☆88Feb 6, 2024Updated 2 years ago
- A cross-platform tool to find traces of old SIDs remaining in LDAP objects of the Active Directory☆26Oct 9, 2026Updated 3 weeks ago
- All-in Fuzzer. Burp suite extension for auto fuzzing params, headers, body☆37Apr 9, 2026Updated 6 months ago
- Ivanti Pulse Secure CVE-2023-46805 Scanner - Based on Assetnote's Research☆14Jan 19, 2024Updated 2 years ago
- Next.js React Server Components RCE exploit for CVE-2025-55182☆70Dec 5, 2025Updated 10 months ago
- Proof of Concept for Authentication Bypass in JetBrains TeamCity Pre-2023.11.4☆34Mar 5, 2024Updated 2 years ago
- Python tool for detecting subdomain takeover vulnerabilities by resolving CNAME records and checking for known error messages. It support…☆15Updated this week
- CVE-2024-21893 to CVE-2024-21887 Exploit Toolkit☆27Apr 6, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆24Apr 17, 2026Updated 6 months ago
- Local File Inclusion (LFI) scanner.☆12Aug 31, 2022Updated 4 years ago
- A collection of awesome one-liner scripts especially for bug bounty tips.☆16Sep 8, 2020Updated 6 years ago
- PHP CGI Argument Injection vulnerability☆35Jan 24, 2026Updated 9 months ago
- Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution☆13Dec 2, 2024Updated last year
- This repository contains the best fuzzing wordlist files☆34Dec 2, 2024Updated last year
- XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnera…☆39Oct 15, 2026Updated 2 weeks ago
- SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions…☆69Oct 13, 2024Updated 2 years ago
- A BurpSuite extension for vulnerability Scanning☆31Feb 16, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Fancy reverse and bind shell handler☆66Updated this week
- Python script to execute commands via Erlang/OTP Distribution Protocol☆15Feb 6, 2024Updated 2 years ago
- CVE-2021-40438 Apache <= 2.4.48 SSRF exploit☆11Dec 12, 2023Updated 2 years ago
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated 2 years ago
- Nuclei templates for drupal vulns... far from perfect☆18Jan 9, 2025Updated last year
- CVE-2023-22515: Confluence Broken Access Control Exploit☆153Nov 12, 2025Updated 11 months ago
- Strumenti per Domini - Whois - IP - Data Breach - Email☆20Updated this week
- Nuclei template and information about the POC for CVE-2024-25600☆31Feb 21, 2024Updated 2 years ago
- This is a simple web application vulnerability scanner that checks if a given URL or IP address is vulnerable to 36 common web applicatio…☆28Aug 30, 2026Updated 2 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ✪ Collection of Metasploit Modules ✪☆17Apr 17, 2026Updated 6 months ago
- Exploit for CVE-2024-5009☆13Jul 8, 2024Updated 2 years ago
- Automation of KNOXSS extension.☆11Apr 12, 2019Updated 7 years ago
- Unauthenticated Remote Code Execution – Bricks <= 1.9.6☆183Feb 25, 2024Updated 2 years ago
- 「📖」Tool created to extract metadata from a domain☆14Dec 7, 2024Updated last year
- Scanner for Log4j RCE CVE-2021-44228☆11Jul 6, 2022Updated 4 years ago
- Command line tool for testing CRLF injection on a list of domains.☆161Apr 14, 2024Updated 2 years ago