D35m0nd142/LFISuite

Health v2 · maintenance only

Adoption not part of the score

1961 stars · 406 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

LFISuite is a fully automatic Python tool that scans for and exploits Local File Inclusion (LFI) vulnerabilities using eight different attack methods, plus an Auto-Hack mode. It also provides reverse shell capabilities and Tor proxy support for anonymity.

Use cases

• scan websites for local file inclusion vulnerabilities
• automatically exploit LFI vulnerabilities
• get a reverse shell from an LFI vulnerability
• test php://filter and php://input attacks
• exploit LFI anonymously through Tor
• find LFI vulnerabilities in web paths

When to choose

• you need automated LFI scanning and exploitation in one tool
• you want multiple LFI attack vectors tried automatically
• you need a reverse shell from an LFI bug
• you want Tor support during exploitation

When to avoid

• you need a maintained tool - it requires Python 2.7 which is end-of-life
• you need general web vulnerability scanning beyond LFI
• you need a GUI-based penetration testing suite
• you need modern exploitation frameworks with active development

Facets

cli-tool · maturity maintenance

penetration-testing security web-scraping security penetration-testing web-development windows python cli lfi exploitation reverse-shell tor vulnerability-scanner python2 linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="D35m0nd142/LFISuite")