> ## Documentation Index
> Fetch the complete documentation index at: https://rootea.es/llms.txt
> Use this file to discover all available pages before exploring further.

# Local File Inclusion (LFI)

> Cross-platform resources for Local File Inclusion (LFI): curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

# Local File Inclusion (LFI)

This page aggregates **cross-platform resources to practice Local File Inclusion (LFI)**: retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

## Curated resources

| Source               | Link                                                                                                                                                                 |
| -------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| HackTricks           | [https://book.hacktricks.wiki/en/pentesting-web/file-inclusion/index.html](https://book.hacktricks.wiki/en/pentesting-web/file-inclusion/index.html)                 |
| PayloadsAllTheThings | [https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/File%20Inclusion](https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/File%20Inclusion) |

## HTB machines practicing Local File Inclusion (LFI) (19)

| Machine                                                       | OS      | Difficulty                                           |
| ------------------------------------------------------------- | ------- | ---------------------------------------------------- |
| [Backdoor](/en/htb/machines/linux/facil/backdoor)             | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Beep](/en/htb/machines/linux/facil/beep)                     | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Breadcrumbs](/en/htb/machines/windows/dificil/breadcrumbs)   | Windows | <span className="dbadge dbadge-hard">HARD</span>     |
| [CrimeStoppers](/en/htb/machines/linux/dificil/crimestoppers) | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [EarlyAccess](/en/htb/machines/linux/dificil/earlyaccess)     | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Inception](/en/htb/machines/linux/medio/inception)           | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Monitors](/en/htb/machines/linux/dificil/monitors)           | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Nineveh](/en/htb/machines/linux/medio/nineveh)               | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [OpenSource](/en/htb/machines/linux/facil/opensource)         | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Poison](/en/htb/machines/linux/medio/poison)                 | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Retired](/en/htb/machines/linux/medio/retired)               | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [ServMon](/en/htb/machines/windows/facil/servmon)             | Windows | <span className="dbadge dbadge-easy">EASY</span>     |
| [Sniper](/en/htb/machines/windows/medio/sniper)               | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [StreamIO](/en/htb/machines/windows/medio/streamio)           | Windows | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Tabby](/en/htb/machines/linux/facil/tabby)                   | Linux   | <span className="dbadge dbadge-easy">EASY</span>     |
| [Timing](/en/htb/machines/linux/medio/timing)                 | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Unicode](/en/htb/machines/linux/medio/unicode)               | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |
| [Unobtainium](/en/htb/machines/linux/dificil/unobtainium)     | Linux   | <span className="dbadge dbadge-hard">HARD</span>     |
| [Waldo](/en/htb/machines/linux/medio/waldo)                   | Linux   | <span className="dbadge dbadge-medium">MEDIUM</span> |

## TryHackMe rooms practicing Local File Inclusion (LFI) (8)

| Room                                                               | Difficulty                                         | Type        | Access  | Official                                                |
| ------------------------------------------------------------------ | -------------------------------------------------- | ----------- | ------- | ------------------------------------------------------- |
| [Advent of Cyber 2023](/en/tryhackme/rooms/adventofcyber2023)      | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/adventofcyber2023)    |
| [Advent of Cyber 3 (2021)](/en/tryhackme/rooms/adventofcyber3)     | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/adventofcyber3)       |
| [Archangel](/en/tryhackme/rooms/archangel)                         | <span className="dbadge dbadge-easy">EASY</span>   | Challenge   | 🟢 Free | [Open](https://tryhackme.com/room/archangel)            |
| [Insekube](/en/tryhackme/rooms/insekube)                           | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/insekube)             |
| [Web Application Basics](/en/tryhackme/rooms/webapplicationbasics) | <span className="dbadge dbadge-easy">EASY</span>   | Walkthrough | 🟢 Free | [Open](https://tryhackme.com/room/webapplicationbasics) |
| [dogcat](/en/tryhackme/rooms/dogcat)                               | <span className="dbadge dbadge-easy">MEDIUM</span> | Challenge   | 🟢 Free | [Open](https://tryhackme.com/room/dogcat)               |
| [File Inclusion](/en/tryhackme/rooms/fileinc)                      | <span className="dbadge dbadge-easy">MEDIUM</span> | Walkthrough | 🔵 VIP  | [Open](https://tryhackme.com/room/fileinc)              |
| [NahamStore](/en/tryhackme/rooms/nahamstore)                       | <span className="dbadge dbadge-easy">MEDIUM</span> | Challenge   | 🟢 Free | [Open](https://tryhackme.com/room/nahamstore)           |

## Related skills

* [/en/skills/rfi](/en/skills/rfi)
* [/en/skills/rce](/en/skills/rce)

***

← [Back to the full glossary](/en/glossary)

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"DefinedTerm","name":"Local File Inclusion (LFI)","termCode":"lfi","inLanguage":"en","url":"https://rootea.es/en/skills/lfi","inDefinedTermSet":{"@type":"DefinedTermSet","name":"Tactical pentesting glossary","url":"https://rootea.es/en/glossary"}}`}
</script>

<script type="application/ld+json">
  {`{"@context":"https://schema.org","@type":"ItemList","name":"HTB machines practicing Local File Inclusion (LFI)","numberOfItems":19,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://rootea.es/en/htb/machines/linux/facil/backdoor","name":"Backdoor"},{"@type":"ListItem","position":2,"url":"https://rootea.es/en/htb/machines/linux/facil/beep","name":"Beep"},{"@type":"ListItem","position":3,"url":"https://rootea.es/en/htb/machines/windows/dificil/breadcrumbs","name":"Breadcrumbs"},{"@type":"ListItem","position":4,"url":"https://rootea.es/en/htb/machines/linux/dificil/crimestoppers","name":"CrimeStoppers"},{"@type":"ListItem","position":5,"url":"https://rootea.es/en/htb/machines/linux/dificil/earlyaccess","name":"EarlyAccess"},{"@type":"ListItem","position":6,"url":"https://rootea.es/en/htb/machines/linux/medio/inception","name":"Inception"},{"@type":"ListItem","position":7,"url":"https://rootea.es/en/htb/machines/linux/dificil/monitors","name":"Monitors"},{"@type":"ListItem","position":8,"url":"https://rootea.es/en/htb/machines/linux/medio/nineveh","name":"Nineveh"},{"@type":"ListItem","position":9,"url":"https://rootea.es/en/htb/machines/linux/facil/opensource","name":"OpenSource"},{"@type":"ListItem","position":10,"url":"https://rootea.es/en/htb/machines/linux/medio/poison","name":"Poison"},{"@type":"ListItem","position":11,"url":"https://rootea.es/en/htb/machines/linux/medio/retired","name":"Retired"},{"@type":"ListItem","position":12,"url":"https://rootea.es/en/htb/machines/windows/facil/servmon","name":"ServMon"},{"@type":"ListItem","position":13,"url":"https://rootea.es/en/htb/machines/windows/medio/sniper","name":"Sniper"},{"@type":"ListItem","position":14,"url":"https://rootea.es/en/htb/machines/windows/medio/streamio","name":"StreamIO"},{"@type":"ListItem","position":15,"url":"https://rootea.es/en/htb/machines/linux/facil/tabby","name":"Tabby"},{"@type":"ListItem","position":16,"url":"https://rootea.es/en/htb/machines/linux/medio/timing","name":"Timing"},{"@type":"ListItem","position":17,"url":"https://rootea.es/en/htb/machines/linux/medio/unicode","name":"Unicode"},{"@type":"ListItem","position":18,"url":"https://rootea.es/en/htb/machines/linux/dificil/unobtainium","name":"Unobtainium"},{"@type":"ListItem","position":19,"url":"https://rootea.es/en/htb/machines/linux/medio/waldo","name":"Waldo"}]}`}
</script>

*Last updated: 2026-05-09*