资 源 简 介
This script can:
Find lfi vulnerability in each parameter automatically
Find the root of the file system automatically
Find default files inside the server in linux and windows
Find passwords in config files
Support basic authentication
Send null bytes to bypass some controls
Write a report of the scan
Support proxy
Detect OS and send only test according the OS detected
Hexaencode support
Output in html format
Examples:
Without proxy:
$ python lfimap.py -t "http://localhost/lfi.php?page=home.txt&module=home" -o report.html
With proxy:
$ python lfimap.py -t "http://localhost/lfi.php?page=home.txt&module=home" -w http://proxy:80 -o report.html
Encoding in hexa:
$ python lfimap.py -t " 请点击左侧文件开始预览 ！预览只提供20%的代码片段，完整代码需下载后查看 加载中 侵权举报
