Showing posts with label LFIMAP. Show all posts
Showing posts with label LFIMAP. Show all posts

Friday, December 3, 2010

LFIMAP – Scan For Files having LFI (Local File Inclusion) Vulnerablilty

LFI issue has been addressed by some other tools like fimap & inspathx:
fimap  is a python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps. fimap is similar to sqlmap just for LFI/RFI bugs instead of sql injection.
inspathx is a tool that uses local source tree to make requests to the URL and searches for path inclusion (Full Path Disclosure) error messages. It’s a very common problem in PHP web applications that crops up a lot. 

A LFIMAP was released recently which focuses purely on LFI attacks.