Best LFI-Enum Alternatives & Competitors in 2026

LinEnum

LinEnum is a tool for Linux enumeration that provides detailed system information and performs various checks and tasks.

LFI-files

A wordlist to bruteforce for Local File Inclusion (LFI) vulnerabilities

Vulneri Pentest

Continuous pentest platform simulating real attacks across web, cloud, and network assets.

Tenzai

Agentic AI platform for continuous, autonomous penetration testing of enterprise apps.

ZeroThreat.ai

Automated pentesting platform for web apps and APIs with AI-driven exploit validation.

Webray RayBox

Automated penetration testing appliance covering recon-to-exploitation attack chain.

KinoSec Zeus

Autonomous AI black-box pentesting platform with exploit chaining and PoC generation.

Allseek

Open-source autonomous penetration testing platform.

checkra1n

Semi-tethered jailbreak for iPhone 5s to iPhone X, running iOS 12.0 and up, using the 'checkm8' bootrom exploit.

o365-attack-toolkit

A toolkit to attack Office365, including tools for password spraying, password cracking, token manipulation, and exploiting vulnerabilities in Office365 APIs and services.

Active Directory Control Paths

A tool for analyzing and visualizing control relationships and privilege escalation paths within Active Directory environments using graph-based representations.

LaZagne Project

Open source application for retrieving passwords stored on a local computer with support for various software and platforms.

PowerUp

PowerUp aims to be a clearinghouse of common Windows privilege escalation vectors that rely on misconfigurations.

GCPBucketBrute

A script to enumerate Google Storage buckets and determine access and privilege escalation

SUDO_KILLER

A tool for privilege escalation within Linux environments by targeting vulnerabilities in SUDO usage.

enum4linux-ng

A next generation version of enum4linux with enhanced features for enumerating information from Windows and Samba systems.

libformatstr.py

A Python library that simplifies format string vulnerability exploitation by providing tools for payload generation, memory manipulation, and automated parameter detection.

MimiPenguin 2.0

A tool to dump login passwords from Linux desktop users, leveraging cleartext credentials in memory.

Hash Extender

Hash Extender is a command-line tool that automates length extension attacks against various hashing algorithms including MD5, SHA-1, SHA-256, and others.

Linux Exploit Suggester 2

A Linux exploit suggestion tool that identifies potential privilege escalation vulnerabilities by analyzing kernel versions and matching them against a database of known exploits.

Cognito Scanner

A Python script that performs security testing attacks against AWS Cognito services including account creation, user enumeration, and privilege escalation vulnerabilities.

Dirtyc0w Docker POC

A proof-of-concept tool that demonstrates the Dirty COW kernel exploit (CVE-2016-5195) for privilege escalation within Docker containers, specifically targeting nginx images while providing mitigation guidance through AppArmor profiles.

Ruler

A tool for interacting with Exchange servers remotely and exploiting client-side Outlook features.

Payloads All The Things

A comprehensive repository of payloads and bypass techniques for web application security testing and penetration testing across multiple platforms and attack vectors.

Social-Engineer Toolkit (SET)

An open-source penetration testing framework for social engineering with custom attack vectors.

Enumerate IAM Permissions

A security assessment tool that identifies AWS IAM permissions by systematically testing API calls to determine the actual scope of access granted to specific credentials.

snmpcheck

A tool for enumerating information via SNMP protocol.

Wifislax

GNU/Linux Wireless distribution for security testing with XFCE desktop environment.

Tugarecon

A subdomain enumeration tool for penetration testers and security researchers.

parameth

A brute force parameter discovery tool for identifying hidden GET and POST parameters in web applications during security assessments.

FDsploit

A Python-based tool that automates the identification and exploitation of file inclusion and directory traversal vulnerabilities in web applications.

Liffy

A local file inclusion exploitation tool

Burp-LFI-tests

A collection of Local File Inclusion (LFI) vulnerability tests and exploitation techniques designed for use with Burp Suite.

LFISuite

A tool for Local File Inclusion (LFI) exploitation and scanning

racepwn

A framework for testing and exploiting race condition vulnerabilities through concurrent request analysis and timing attack automation.

surf

A tool for identifying and exploiting SSRF vulnerabilities in modern cloud environments by filtering host lists to find viable attack candidates.

ESC

ESC is an interactive .NET SQL console client with enhanced SQL Server discovery and data exfiltration features designed for penetration testing and red team engagements.

xssor2

A tool for testing and exploiting Cross-Site Scripting (XSS) vulnerabilities.

Vaya-Ciego-Nen

A tool to detect, manage and exploit Blind Cross-site scripting (XSS) vulnerabilities.

XXEinjector

Automate the exploitation of XXE vulnerabilities

AWSBucketDump

A security tool for discovering and analyzing interesting files in AWS S3 buckets across multiple regions and bucket types.

s3reverse

A format conversion tool for S3 buckets designed to assist bug bounty hunters and security testers in standardizing bucket data during reconnaissance activities.

XFFenum

A tool for enumerating X-Forwarded-For headers in HTTP requests

Burp Suite Professional

A web application security testing platform that combines manual and automated testing tools for conducting comprehensive security assessments and penetration testing.

Synack Sara

AI-powered autonomous penetration testing platform with multi-agent system

XBOW Captcha Bypass Tool

AI-powered automated penetration testing platform for vulnerability discovery

FireCompass AI-powered Pen Testing

AI-powered automated pen testing & continuous red teaming platform

ImmuniWeb® On-Demand

ImmuniWeb® On-Demand is a web application penetration testing platform that combines AI-powered automation with manual security testing to provide comprehensive vulnerability assessments and compliance reporting.