exploit-file-download - File Download and LFI Vulnerability Tester
Detect and exploit arbitrary file download and LFI vulnerabilities using curl, ffuf, and wget
Tags
Updated: 2026-06-30Capabilities
Typical Inputs
Typical Outputs
What this skill does
- detect LFI vulnerabilities
- test path traversal
- read sensitive files
- use PHP wrappers
- bypass filters
- test file download
- analyze PHP source code
- inject log poisoning
- execute commands
- test URL encoded payloads
- download files
- enumerate directories
- test database configurations
- test extension bypass
- evade WAF
- read log files
Inputs
- target URL
- file parameter name
- LFI payload list
- PHP code snippet
- web server log path
- authorization documentation
Outputs
- vulnerability detection result
- downloaded files
- read file content
- command execution output
- test results file
- database records
Requirements
- curl installed
- ffuf installed
- wget installed
- explicit written authorization
- compliance with local laws