What type of malicious content is typically uploaded in Local File Inclusion (LFI) vulnerabilities?

Local File Inclusion (LFI) vulnerabilities occur when a web application allows users to include files from the server's file system without proper validation. This exploitation enables an attacker to traverse directories and include files that should not be accessible to the user, often leading to severe security breaches.

The most commonly uploaded malicious content in the context of LFI vulnerabilities is malicious code. This is because the attacker can include files that contain code, such as PHP scripts or other server-side scripts, and execute that code on the server. This can lead to remote code execution, unauthorized access to sensitive information, or manipulation of server-side logic.

While executable programs, image files, and HTML files could be relevant in different contexts, they do not serve the same immediate purpose as malicious code in LFI scenarios. Malicious code is specifically crafted to carry out harmful actions, which aligns directly with the goals of attackers exploiting LFI vulnerabilities.