Skip to content
A unique automated LFi Exploiter with Bind/Reverse Shells
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.

LFI Freak


  • Works with Windows, Linux and OS X
  • Includes bind and reverse shell for both Windows and Linux
  • Written in Python 2.7

What is this all about?

A unique tool for exploiting local file inclusions using PHP Input, PHP Filter and Data URI methods.



I am not responsible for any kind of illegal acts you cause. This is meant to be used for ethical purposes by penetration testers. If you plan to copy, redistribute please give credits to the original author.

Follow Me:

Creative Commons License
LFiFreak by Osanda Malith Jayathissa is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
Based on a work at

You can’t perform that action at this time.