Data verified May 2026
ADYour product here. Reach security decision-makers.Launch a campaignLFI-Labs Description
A small set of PHP scripts designed for practicing exploiting LFI, RFI, and CMD injection vulnerabilities, primarily used for training and testing purposes. It allows users to test detection products, exploit tools, etc., by adding them to an Apache VirtualHost directive for testing purposes. Can be set up on UN*X + Apache + PHP, run as a Docker instance using the Dockerfile, or as a Vagrant instance using the Vagrantfile. Inspired by Jose Nazario, it provides useful links for LFI/RFI/CMD injection background.
LFI-Labs FAQ
Common questions about LFI-Labs including features, pricing, alternatives, and user reviews.
LFI-Labs is A set of PHP scripts for practicing LFI, RFI, and CMD injection vulnerabilities. It is a Security Operations solution designed to help security teams with PHP, LFI.
Have more questions? Browse our categories or search for specific tools.
