kostas-pa/LFITester ? reverse-engineered prompt
Reverse engineered prompt
Build me a Python tool that can check websites for Local File Inclusion issues and try common ways to exploit them if it finds a weakness.
I want to be able to give it one URL or a file full of URLs, and optionally let it crawl a site to find more endpoints with parameters. It should try different payload styles, handle common bypass tricks, work with custom headers and cookies, and support loading request data from a Burp or packet file. If I give it proxy settings, it should use them, and it would be great if it can run through multiple checks at once to speed things up.
If the target looks vulnerable, add an optional mode that attempts to get a reverse shell using common LFI to RCE methods like log poisoning, session files, and wrappers. Make it feel like a command line security tool with clear output, verbose mode, stealth mode, and a save results option. Look up current docs online if you need to.
Are you gonna build this?
make sure you review the code using coderabbit