Local File Inclusion (LFI)

Cross-platform resources for Local File Inclusion (LFI): curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

This page aggregates cross-platform resources to practice Local File Inclusion (LFI): retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

Coverage: 27 challenges across 2 platforms — 19 HackTheBox · 8 TryHackMe. 19 with a Spanish writeup, 19 with a video writeup.

Where to start

Ordered by actual difficulty. At the same level: isolated lab first, then the guided room, and the full machine last.

1. TryHackMe — Advent of Cyber 2023 (Easy · ~1440 min) · 🇬🇧
2. TryHackMe — Advent of Cyber 3 (2021) (Easy · ~1440 min) · 🇬🇧
3. TryHackMe — Archangel (Easy · ~45 min) · 🇬🇧
4. TryHackMe — Insekube (Easy · ~120 min) · 🇬🇧
5. TryHackMe — Web Application Basics (Easy · ~120 min) · 🇬🇧
6. HackTheBox — Backdoor (Fácil) · 🇪🇸 🇬🇧 📹

Curated resources

Source	Link
HackTricks	https://book.hacktricks.wiki/en/pentesting-web/file-inclusion/index.html
PayloadsAllTheThings	https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/File%20Inclusion

HTB machines practicing Local File Inclusion (LFI) (19)

Machine	OS	Difficulty	Writeup
Backdoor	Linux	EASY	🇪🇸 🇬🇧 📹
Beep	Linux	EASY	🇪🇸 🇬🇧 📹
Breadcrumbs	Windows	HARD	🇪🇸 🇬🇧 📹
CrimeStoppers	Linux	HARD	🇪🇸 🇬🇧 📹
EarlyAccess	Linux	HARD	🇪🇸 🇬🇧 📹
Inception	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Monitors	Linux	HARD	🇪🇸 🇬🇧 📹
Nineveh	Linux	MEDIUM	🇪🇸 🇬🇧 📹
OpenSource	Linux	EASY	🇪🇸 🇬🇧 📹
Poison	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Retired	Linux	MEDIUM	🇪🇸 🇬🇧 📹
ServMon	Windows	EASY	🇪🇸 🇬🇧 📹
Sniper	Windows	MEDIUM	🇪🇸 🇬🇧 📹
StreamIO	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Tabby	Linux	EASY	🇪🇸 🇬🇧 📹
Timing	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Unicode	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Unobtainium	Linux	HARD	🇪🇸 🇬🇧 📹
Waldo	Linux	MEDIUM	🇪🇸 🇬🇧 📹

TryHackMe rooms practicing Local File Inclusion (LFI) (8)

Room	Difficulty	Type	Access	Official
Advent of Cyber 2023	EASY	Walkthrough	🟢 Free	Open
Advent of Cyber 3 (2021)	EASY	Walkthrough	🟢 Free	Open
Archangel	EASY	Challenge	🟢 Free	Open
Insekube	EASY	Walkthrough	🟢 Free	Open
Web Application Basics	EASY	Walkthrough	🟢 Free	Open
dogcat	MEDIUM	Challenge	🟢 Free	Open
File Inclusion	MEDIUM	Walkthrough	🔵 VIP	Open
NahamStore	MEDIUM	Challenge	🟢 Free	Open

Related skills

• /en/skills/rfi
• /en/skills/rce

---

← Back to the full glossary

Last updated: 2026-08-17