OsandaMalith/LFiFreak

Stars
261
Rank 156,630 (Top 4 %)
Language
Python
License
Other
Created over 9 years ago
Updated over 9 years ago

OsandaMalith/LFiFreak

OsandaMalith

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

A unique automated LFi Exploiter with Bind/Reverse Shells

LFI Freak

Features

Works with Windows, Linux and OS X
Includes bind and reverse shell for both Windows and Linux
Written in Python 2.7

What is this all about?

A unique tool for exploiting local file inclusions using PHP Input, PHP Filter and Data URI methods.

Dependencies

BeautifulSoup

Disclaimer

I am not responsible for any kind of illegal acts you cause. This is meant to be used for ethical purposes by penetration testers. If you plan to copy, redistribute please give credits to the original author.

Video: http://youtu.be/g0SHHV7DHx8
Follow Me: https://twitter.com/OsandaMalith

LFiFreak by Osanda Malith Jayathissa is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
Based on a work at https://github.com/OsandaMalith/LFiFreak/.

Exe2Image

A simple utility to convert EXE files to JPEG images and vice versa.

IPObfuscator

A simple tool to convert the IP to a DWORD IP

ARP-Spoofer

A Simple ARP Spoofer using Scapy

PE2HTML

Injects HTML/PHP/ASP to the PE

ChromeFreak

A Cross-Platform Forensic Framework for Google Chrome

SkypeFreak

A Forensic Framework for Skype

ApiMon

A simple API monitor for Windbg

PESecInfo

A simple tool to view important DLL Characteristics and change DEP and ASLR

bootloader

WindowsInternals

Experiments on the Windows Internals

Shellcodes

My Shellcode Archive

Anti-Debug

Some of the Anti-Debugging Tricks

ImageExploiter

Hide JavaScript inside your GIF and BMP images

VBShellCode

Making shellcode UD - https://osandamalith.com

GameHacking

Some cool game hacks

Cryptculator

A tool to calculate big numbers, perform hashing and encodings.

ShellCode-Extractor

This tool will extract the opcodes from the .text section and display in different hex formats for different syntaxes. Works only with valid PE files.

TP-Link

Firmware Reversing Repo :p

BrowserFreak

Automated Password Dumper for Web Browsers

Malware

This is a malware repo. Use them at your own risk. This is strictly for educational purposes only.

Zip-File-Freak

An automated Zip file cracker

Keygen

A small Keygen made for fun

WebCrawler

A simple web site crawler using the breadth first search algorithm

BlueIvy

A Powerful Keylogger for Windows Environments

CaesarFreak

Exploits

TextEncode

A Small Tool for Encoding Text

Meterpreter-BackDoor

Automated BackDoor for windows all systems

Wi-Fi-Freak

A tool to recover stored Wi-Fi passwords

BSSQLi

Automated Blind SQL Injector

Algorithms

My Algorithms Repository

Wi-Fi-Hash-Decrypter

Small utitlities for decrypting the stored Wi-Fi hashes

MagicFolderHide

A Simple method to hide your files based on a desgin flow in Windows

XSS-Invader

This is a payload encoder using fromCharCode() in JS to bypass Magic Quotes directive in PHP.

CVE-2015-4870

MySQL DoS in the Procedure Analyse Function – CVE-2015-4870

gdbinit

Flags util (for .gdbinit)

cpp

TextArt

Basic Ascii Generator

RaspberryPi

Rubeus

ine-dl

INE course downloader

WMI

DataScience

Data Science Stuff

Jupyter Notebook

RomPagerDoS

ZTE and TP-Link DoS Exploit