My favorites | Sign in
Project Home Downloads Wiki Issues Source
Project Information
Members

This script can:

Find lfi vulnerability in each parameter automatically
Find the root of the file system automatically
Find default files inside the server in linux and windows
Find passwords in config files
Support basic authentication
Send null bytes to bypass some controls
Write a report of the scan
Support proxy
Detect OS and send only test according the OS detected
Hexaencode support
Output in html format

Examples:
Without proxy:
$ python lfimap.py -t "http://localhost/lfi.php?page=home.txt&module=home" -o report.html

With proxy:
$ python lfimap.py -t "http://localhost/lfi.php?page=home.txt&module=home" -w http://proxy:80 -o report.html

Encoding in hexa:
$ python lfimap.py -t "http://localhost/lfi.php?page=home.txt&module=home" -x

Sending null byte:
$ python lfimap.py -t "http://localhost/lfi.php?page=home.txt&module=home" -n

In this site exist a good article about this tool.
http://www.aldeid.com/index.php/Lfimap

Mailme to aepereyra (at) gmail dot com

Powered by Google Project Hosting