Setup Home Instructions Setup / Reset
Attacks SQL Injection SQL Injection (Blind) OS Command Injection XPATH Injection Unrestricted File Upload XSS - Reflected XSS - Stored XSS - DOM Based SSRF / XSPA File Inclusion Session Flaws Insecure Direct Object Reference Missing Functional Access Control CSRF Cryptography Redirects & Forwards Server Side Template Injection

File Inclusion

File inclusion is an attack that would allow an attacker to access unintended files on the server. This vulnerability exploits application’s functionality to include dynamic files. Two categories in this attack are Local File Inclusion (LFI) and Remote File Inclusion (RFI).

Read more about File Inclusions
https://www.owasp.org/index.php/Testing_for_Local_File_Inclusion https://www.owasp.org/index.php/Testing_for_Remote_File_Inclusion

Click on the link below to read the help file.

Readme