Local File Inclusion (LFI)

Cross-platform resources for Local File Inclusion (LFI): curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

Local File Inclusion (LFI)

This page aggregates cross-platform resources to practice Local File Inclusion (LFI): retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

Curated resources

Source	Link
HackTricks	https://book.hacktricks.wiki/en/pentesting-web/file-inclusion/index.html
PayloadsAllTheThings	https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/File%20Inclusion

HTB machines practicing Local File Inclusion (LFI) (19)

Machine	OS	Difficulty
Backdoor	Linux	EASY
Beep	Linux	EASY
Breadcrumbs	Windows	HARD
CrimeStoppers	Linux	HARD
EarlyAccess	Linux	HARD
Inception	Linux	MEDIUM
Monitors	Linux	HARD
Nineveh	Linux	MEDIUM
OpenSource	Linux	EASY
Poison	Linux	MEDIUM
Retired	Linux	MEDIUM
ServMon	Windows	EASY
Sniper	Windows	MEDIUM
StreamIO	Windows	MEDIUM
Tabby	Linux	EASY
Timing	Linux	MEDIUM
Unicode	Linux	MEDIUM
Unobtainium	Linux	HARD
Waldo	Linux	MEDIUM

TryHackMe rooms practicing Local File Inclusion (LFI) (8)

Room	Difficulty	Type	Access	Official
Advent of Cyber 2023	EASY	Walkthrough	🟢 Free	Open
Advent of Cyber 3 (2021)	EASY	Walkthrough	🟢 Free	Open
Archangel	EASY	Challenge	🟢 Free	Open
Insekube	EASY	Walkthrough	🟢 Free	Open
Web Application Basics	EASY	Walkthrough	🟢 Free	Open
dogcat	MEDIUM	Challenge	🟢 Free	Open
File Inclusion	MEDIUM	Walkthrough	🔵 VIP	Open
NahamStore	MEDIUM	Challenge	🟢 Free	Open

Related skills

• /en/skills/rfi
• /en/skills/rce

---

← Back to the full glossary

Last updated: 2026-05-09