lfi-traversal

What problem does it solve?

This Skill automates the detection and prevention of Local File Inclusion (LFI) and Path Traversal vulnerabilities in web applications, enhancing application security.

Core Features & Use Cases

• LFI Detection: Identifies file inclusion vulnerabilities where user inputs are used to access local files.
• Path Traversal Detection: Discovers path traversal vulnerabilities that allow attackers to access unauthorized directories.
• Detection-First Approach: Focuses on detection without exploitation to prevent sensitive data exposure.
• Methodology: Utilizes a structured approach including parameter identification, path traversal testing, encoding variants, and PHP wrapper checks.

Quick Start

Use the lfi-traversal skill to detect Local File Inclusion (LFI) in the 'showimage.php' endpoint on the target domain.