small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns
☆335Apr 8, 2024Updated 2 years ago
Alternatives and similar repositories for lfi-labs
Users that are interested in lfi-labs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- packetstormsecurity.net exploit archive 133ch3r☆25Feb 22, 2011Updated 15 years ago
- Working Rsh Client With Bind/Reverse Shell☆19Sep 15, 2015Updated 10 years ago
- a CMD shell in masm that listens on port 8080☆12Dec 19, 2020Updated 5 years ago
- MoneyX is an intentionally vulnerable JSP application used for training developers in application security concepts.☆30May 10, 2016Updated 10 years ago
- Damn Vulnerable File Upload V 1.1☆104May 26, 2018Updated 8 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Simple web app for displaying cowrie data in your browser☆12Jun 2, 2016Updated 10 years ago
- Basic app to practice modsec bypass☆22May 12, 2016Updated 10 years ago
- Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn rea…☆461Dec 6, 2021Updated 4 years ago
- A set of XSS vulnerable PHP scripts for testing☆38Feb 10, 2013Updated 13 years ago
- Local UNIX PrivEsc Aggregation☆242Apr 9, 2016Updated 10 years ago
- psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-s…☆277Feb 12, 2021Updated 5 years ago
- Vulnerable Linux socket game for educational purposes☆22Apr 22, 2017Updated 9 years ago
- This is a SOAP service written in C# that has intentional SQL injection vulnerabilties.☆21Nov 27, 2016Updated 9 years ago
- A tool for the persistent XSS exploitation with a focus for mobile web browsers☆55May 8, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- rev-door is a small backdoor with only ONE line of PHP code, which takes command from POST data and execute it on server side. It is like…☆26May 12, 2016Updated 10 years ago
- SQLI labs to test error based, Blind boolean based, Time based.☆5,836Dec 11, 2023Updated 2 years ago
- A simple tool to dump users in popular forums and CMS :)☆31Jan 30, 2018Updated 8 years ago
- PFI (Port Forwarding Interceptor)☆46Jan 29, 2026Updated 7 months ago
- Automatically exported from code.google.com/p/unix-security-file-parser☆34Dec 21, 2015Updated 10 years ago
- Tools for encrypting and decrypting things using Cisco's type 7 encryption.☆16Jan 11, 2013Updated 13 years ago
- Pivoter is a proxy tool for pentesters to have easier lateral movement.☆144Aug 9, 2015Updated 11 years ago
- Use HTTP Smuggling Lab to learn HTTP Smuggling.☆348Nov 20, 2022Updated 3 years ago
- Scripts that aren't PowerShell☆48Jan 13, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- small set of scripts to practice exploit XSS and CSRF vulnerabilities☆66Dec 22, 2017Updated 8 years ago
- Capture passwords of login attempts on non-existent and disabled accounts.☆38Aug 17, 2022Updated 4 years ago
- A python script used to parse the SAM registry hive.☆78Jan 26, 2018Updated 8 years ago
- A C# web handler that is vulnerable to XXE with PoC. This is to serve as an example of what vulnerable C# code looks like.☆26Aug 10, 2013Updated 13 years ago
- Holepuncher, A wrapper script to open ports in iptables and start a listener.☆33Feb 26, 2016Updated 10 years ago
- Kojoney2 is a low interaction SSH honeypot written in Python. Based on Kojoney by Jose Antonio Coret☆39Jan 6, 2015Updated 11 years ago
- Blind SQL injection exploitation tool written in ruby.☆101Dec 1, 2024Updated last year
- Simple but effective word list transmutation command-line app. Feed it words, and mangle them into new variations quickly and easily!☆33May 5, 2016Updated 10 years ago
- Recon, Subdomain Bruting, Zone Transfers☆230Aug 2, 2016Updated 10 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo☆815Nov 28, 2022Updated 3 years ago
- OWSAP Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application which works on web sockets for client-server communication.☆362Jul 24, 2026Updated last month
- Reverse to use in a batfile which can call the ip and ports from itself☆25Dec 19, 2020Updated 5 years ago
- For when Plan A fails☆13Jan 24, 2012Updated 14 years ago
- Haskell parser for the REIL intermediate language (currently a work-in-progress)☆11Jan 12, 2018Updated 8 years ago
- LNHG - Mass Web Fingerprinter☆63Feb 22, 2016Updated 10 years ago
- Spray SMB with hashes, Then psexec☆32Jul 3, 2019Updated 7 years ago