paralax / Lfi Labs
Licence: mit
small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns
Stars: ✭ 211
Labels
Projects that are alternatives of or similar to Lfi Labs
Ounotes
An Application built for students to access Notes , Question Papers , Syllabus and Resources for all Subjects of O.U (Osmania University) 📘👨🎓
Stars: ✭ 173 (-18.01%)
Mutual labels: education
Eeducation
e-education solutions(Agora Reference Design)
Stars: ✭ 187 (-11.37%)
Mutual labels: education
Free Computer Science University
So after watching all the resources i thought to put all the important technical courses in one place.And help those people who wants to learn computer science.All the courses are free here.
Stars: ✭ 175 (-17.06%)
Mutual labels: education
Observations
Tools for loading standard data sets in machine learning
Stars: ✭ 190 (-9.95%)
Mutual labels: education
Awesome Python Applications
💿 Free software that works great, and also happens to be open-source Python.
Stars: ✭ 13,275 (+6191.47%)
Mutual labels: education
Learn Anything
Organize world's knowledge, explore connections and curate learning paths
Stars: ✭ 13,532 (+6313.27%)
Mutual labels: education
Ibm Z Zos
The helpful and handy location for finding and sharing z/OS files, which are not included in the product.
Stars: ✭ 198 (-6.16%)
Mutual labels: education
Clover
ROS-based framework and RPi image to control PX4-powered drones 🍀
Stars: ✭ 177 (-16.11%)
Mutual labels: education
Awesome Computer Science Opportunities
An awesome list of events and fellowship opportunities for Computer Science students
Stars: ✭ 2,445 (+1058.77%)
Mutual labels: education
Free Gophers Pack
✨ This pack of 100+ gopher pictures and elements will help you to build own design of almost anything related to Go Programming Language: presentations, posts in blogs or social media, courses, videos and many, many more.
Stars: ✭ 2,343 (+1010.43%)
Mutual labels: education
Datasets For Good
List of datasets to apply stats/machine learning/technology to the world of social good.
Stars: ✭ 174 (-17.54%)
Mutual labels: education
Hackclub
🏫 Hack Club is a nonprofit network of computer science clubs where members learn to code through tinkering and building projects
Stars: ✭ 2,139 (+913.74%)
Mutual labels: education
Telerik Academy
Course exercises | Telerik Academy 2013/2014 | Martin Nikolov
Stars: ✭ 186 (-11.85%)
Mutual labels: education
Elmsln
ELMS - create and sustain innovation in education. Dream with us!
Stars: ✭ 205 (-2.84%)
Mutual labels: education
Learnosm
LearnOSM.org content, Jekyll layouts & issue tracking. This repository is dedicated to helping people learn how to map in OpenStreetMap (OSM) and use many of the software and tools in the OSM community.
Stars: ✭ 200 (-5.21%)
Mutual labels: education
Data Science In Education
Repository for 'Data Science in Education Using R' by Emily A. Bovee, Ryan A. Estrellado, Jesse Mostipak, Joshua M. Rosenberg, and Isabella C. Velásquez to be published by Routledge in 2020
Stars: ✭ 196 (-7.11%)
Mutual labels: education
lfi-labs
small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns
why?
for training and testing purposes. you can test detection products (e.g. vulnerability scanners), exploit tools, etc.
these are NOT intended for evaluating appsec testing tools.
the idea is that you'd add these to an Apache VirtualHost directive for testing purposes. if you need to do some quick and dirty testing, fire up php -S 0.0.0.0:8080 or something and go to town.
how?
three big options.
- UN*X + Apache + PHP, install lfi-labs under somewhere and get to work.
- run a Docker instance using the Dockerfile.
docker-compose up - run a Vagrant instance using the Vagrantfile.
vagrant up
who?
jose nazario @jnazario
inspired by
https://github.com/AUDI-1/sqli-labs
useful links
LFI/RFI/CMD injection background
- https://pentesterlab.com/exercises/php_include_and_post_exploitation/course
- http://hakipedia.com/index.php/Local_File_Inclusion
- http://www.ush.it/2009/02/08/php-filesystem-attack-vectors/
- https://websec.wordpress.com/2009/11/28/freebsd-directory-listing-with-php-file-functions/
- http://diablohorn.com/2010/01/16/interesting-local-file-inclusion-method/
- http://blog.ptsecurity.com/2010/08/another-alternative-for-null-byte.html
- https://www.notsosecure.com/2010/02/02/local-file-inclusion-with-magic_quotes_gpc-enabled/
- http://www.ush.it/2009/07/26/php-filesystem-attack-vectors-take-two/
- http://www.ush.it/2009/02/08/php-filesystem-attack-vectors/
- https://www.imperva.com/docs/HII_Remote_and_Local_File_Inclusion_Vulnerabilities.pdf
walkthrough
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].