​
Overview

L8R (LFISCANNER) is an advanced tool for identifying Local File Inclusion (LFI), Remote File Inclusion (RFI) and Local File Disclosure (LFD) vulnerabilities. These issues (CWE-98 and CWE-73) are often rated as critical-severity due to their potential for arbitrary code execution or unauthorized access to sensitive system files.

L8R’s thorough scanning capabilities help uncover these high-risk vulnerabilities effectively.

​
Usage Examples

You can specify a list of target URLs for L8R to check for Local File Inclusion, Remote File Inclusion and Local File Disclosure vulnerabilities. Optionally, you may configure any settings you’d like. Afterward, simply click on Scan to launch your scan.

Shortly after your scan has been launched, you will be redirected to the page to view your pending scan.

You must provide a list of target URLs to scan for vulnerabilities, not base URLs or root domains. A few examples:

Correct:

https://example.com/path/to/scan?param1=xyz&param2=xyz

https://api.example.com/path/to/scan2

Incorrect:

https://example.com/

https://app.example.com/

​
Capabilities

L8R (LFISCANNER) is an advanced Local File Inclusion (LFI), Remote File Inclusion (RFI) & Local File Disclosure (LFD) scanner equipped with the following capabilities:

​
Limitations

There are currently no limitations reported for L8R.

​
Best Practices

We recommend you to follow the best practices that we’ve outlined in detail.

Was this page helpful?

Server-Side Request Forgery (SSRF) ScannerOS Command Injection Scanner