exploit-lfi
crazyMarky/pentest-skillsSkill
本地文件包含 (LFI) 漏洞检测和利用工具。使用 curl、ffuf 等工具测试 LFI 漏洞，支持路径遍历、PHP 伪协议利用、日志投毒 RCE、敏感文件读取。当用户需要检测 LFI 漏洞、利用文件包含漏洞读取服务器文件时使用此技能。
Why this score
This repo hosts 10 skills, so its 340 stars are split between them (about 34 each) for scoring.
Popularity score: 54/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit 616feed88d53, with Cisco's open-source skill-scanner.
What its code does:
- Reads environment variables and sends network requests with them API clients do this to send your key to the service. Check which service it talks to.SKILL.md:84 and 5 more
- Runs shell commands Common for dev tools. Read the commands it runs.SKILL.md:2 and 1 more
- Makes network requestsSKILL.md, scripts/lfi_bypass_tester.py:167, scripts/lfi_detector.py:177 and 10 more
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneexploit-lfi crazyMarky/pentest-skills · Skill | 54 | ★ 340 | ≈33 always | 5mo ago |
| 03-exploit-development Masriyan/Claude-Code-CyberSecurity-Skill · Skill Both about exploit | 66 | ★ 490 | ≈24 always | 19d ago |
| exploit-chainer 0xSteph/pentest-ai-agents · Subagent Both about exploit | 64 | ★ 2.4k | ≈23 in chat | 29d ago |
| exploit-researcher hypnguyen1209/offensive-claude · Subagent Both about exploit | 61 | ★ 394 | ≈38 in chat | 1mo ago |
| web-exploit-agent blacklanternsecurity/red-run · Subagent Both about exploit | 58 | ★ 291 | ≈24 in chat | 1mo ago |