hunt-lfi

What problem does it solve?

Web applications frequently expose file access parameters that, if misconfigured, allow attackers to read sensitive files, perform local file inclusion, or include remote content. This Skill teaches hunters to identify LFI/RFI and path-traversal weaknesses and to chain techniques for escalation.

Core Features & Use Cases

• Methodical detection of LFI/RFI and path traversal vectors across common parameter patterns.
• Demonstrations of bypass techniques (e.g., double encoding, log-based payloads) and chain templates leading to read-side exposure or RCE.
• Real-world workflows for validating vulnerabilities and building exploitation chains against test targets.

Quick Start

Test file-access parameters with safe payloads to verify LFI/RFI and path-traversal chains on the target.