$ ctf42

#lfi (local-file-inclusion) CTF challenges

Also written as local-file-inclusion.

10 CTF challenges using lfi (local-file-inclusion) from 9 CTFs (2021–2026), 10 with writeups.

Web · 10

Often combined with

#path-traversal 2 #path-normalization-bypass 1 #flask 1 #deno-file-scheme 1 #ssrf 1 #race-condition 1 #proc-memory-read 1 #php-rce 1 #type-juggling 1 #sql-injection 1 #os-path-join 1

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Category Has
funny_factorials
#lfi (local-file-inclusion)#path-normalization-bypass#flask
 AmateursCTF 2023 24.54 Web files wu 3
unzipper
#lfi (local-file-inclusion)
 hxp 2021 99.41 Web files wu 3
GIFT
#type-juggling#lfi (local-file-inclusion)#sql-injection
 TetCTF 2023 53.89 Web files wu 1
safe_proxy
#ssrf#lfi (local-file-inclusion)#deno-file-scheme
 CrewCTF 2023 20.33 Web files wu 1
just_download_it
#path-traversal#lfi (local-file-inclusion)
 VuwCTF 2026 25.00 Web files wu 1
Funny_lfr
#lfi (local-file-inclusion)#race-condition
 SekaiCTF 2024 36.96 Web files wu 1
delfi
#lfi (local-file-inclusion)#proc-memory-read
 TAMUctf 2021 – Web files wu 1
LocalCardMaker
#lfi (local-file-inclusion)#php-rce
 THCon 2022 – Web files wu 1
msfrognymize
#lfi (local-file-inclusion)#path-traversal#os-path-join
 corCTF 2023 36.97 Web files wu 1
includers_revenge
#lfi (local-file-inclusion)
 hxp 2021 99.41 Web files wu 1