Remote File Inclusion (RFI)

Cross-platform resources for Remote File Inclusion (RFI): curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

Remote File Inclusion (RFI)

This page aggregates cross-platform resources to practice Remote File Inclusion (RFI): retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

Curated resources

Source	Link
HackTricks	https://book.hacktricks.wiki/en/pentesting-web/file-inclusion/index.html

HTB machines practicing Remote File Inclusion (RFI) (4)

Machine	OS	Difficulty
Fulcrum	Linux	INSANE
Sniper	Windows	MEDIUM
StreamIO	Windows	MEDIUM
TartarSauce	Linux	MEDIUM

TryHackMe rooms practicing Remote File Inclusion (RFI) (2)

Room	Difficulty	Type	Access	Official
File Inclusion	MEDIUM	Walkthrough	🔵 VIP	Open
The Bandit Surfer	HARD	Challenge	🟢 Free	Open

Related skills

• /en/skills/lfi
• /en/skills/rce

---

← Back to the full glossary

Last updated: 2026-05-09