[addtool] Liffy

[gwen001]

[link]https://github.com/mzfr/liffy[/link] [short_descr]Local file inclusion exploitation tool.[/short_descr] [tags]lfi,vulnerabilities,exploit[/tags] [long_descr]Main features:

• data:// for code execution
• expect:// for code execution
• input:// for code execution
• filter:// for arbitrary file reads
• /proc/self/environ for code execution in CGI mode
• Apache access.log poisoning
• Linux auth.log SSH poisoning
• Direct payload delivery with no stager
• Support for absolute and relative path traversal
• Support for cookies for authentication[/long_descr]

[gwen001]

Issue correctly handled, tool is waiting for human validation.

[gwen001]

Tool has been accepted: https://offsec.tools/tool/liffy

Thank you!