A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

Advanced dork Search & Mass Exploit Scanner

Check your WAF before an attacker does

Local file inclusion exploitation tool

🎯 RFI/LFI Payload List

swiss army knife for hackers

Another web vulnerabilities scanner, this extension works on Chrome and Opera

XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:

Local File Inclusion discovery and exploitation tool

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

Dork Search , Vulnerability Scanner ,SQL Injection , XSS , LFI ,RFI

RCE for old gitlab version <= 11.4.7 & 12.4.0-12.8.1 and LFI for old gitlab versions 10.4 - 12.8.1

Wicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion.

LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.

Lfi Scan Tool