Carder.life

Carder.life (http://txgate.io:443/index.php)
-   Flooding & Offtopic (http://txgate.io:443/forumdisplay.php?f=50)
-   -   1-Liner to find LFI (Local File Inclusion) Vulnerabilities (http://txgate.io:443/showthread.php?t=61524)

Vipgift19 02-18-2025 11:18 PM


This one-liner will allow you to find LFI vulnerabilities on multiple URLs. Utilizing 'paramspider' to collect URL parameters from web archives, importing them to 'ffuf' for fuzzing while using an external wordlist dictionary.
The following tools are required:
https://github.com/devanshbatham/ParamSpider
https://github.com/ffuf/ffuf

Example:
python3 paramspider.py -d testphp.vulnweb.com -o urls.txt | for URL in $(</root/Tools/ParamSpider/output/urls.txt); do (ffuf -u "$<URL}" -c -w /root/FUZZB/SecLists/sts/Fuzzing/LFI/LFI-Jhaddix.txt -ac); done


All times are GMT. The time now is 05:51 AM.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2025, vBulletin Solutions, Inc.