Glossary
REMOTE FILE INCLUSION / RFI
defined.
A vulnerability allowing an attacker to include and execute remote files via vulnerable include statements — almost always resulting in immediate RCE.
A–Z
A vulnerability allowing an attacker to include and execute remote files via vulnerable include statements — almost always resulting in immediate RCE.
RFI is LFI’s more dangerous sibling: where LFI reads local files, RFI fetches and executes a remote file. PHP’s allow_url_include was a notorious source. Modern frameworks ship with this disabled by default.
See our web application penetration testing, API security testing, network penetration testing, and cloud security audit services for how we test for and defend against this class of issue.
30-minute call with an OSCP-certified engineer. Tailored proposal in 24 hours.