# This is the local file inclusion demo:

plugins
audit localFileInclude
output console,textFile
output config textFile
set fileName output-w3af.txt
set verbose True
back

discovery webSpider
discovery config webSpider
set onlyForward True
back

back

target
set target http://localhost/w3af/audit/local_file_inclusion/index.html
back

start

assert len(kb.kb.getData('localFileInclude','localFileInclude')) == 3

exploit
exploit localFileReader
interact 0
list
list -r 2
endInteraction

exit