tired of manually add dot-dot-slash to your possible path traversal? this short snippet will increment ../ on the URL.
[*] Python3 is required and requests library (pip3 install requests)
- git clone https://github.com/momenbasel/liffier.git
- cd liffier && python3 liffier.py
- enter the url to test on and the possible vulnerable parameter at the end of the URL, as the tool only appends at the end of the URL
- enter internal filename with bypasses like nullbyte (https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Directory%20Traversal)
- enter the number of requests that the tool will send || number of times the tool will append another ../ to the request.