skills.rest
yaklang
yaklangOFFICIAL
Explore all skills by this author →
GitHub

file-access-vuln

Identify and test file-access and upload workflow vulnerabilities across download endpoints and file paths.

1.6k|204|Updated Apr 7, 2026
Search Tags:#web-security#file-access#lfi#boundary-testing#vulnerability-testing#path-traversal#upload-security
One-click install
npx skills add https://github.com/yaklang/hack-skills --skill file-access-vuln
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: file-access-vuln
Source: https://github.com/yaklang/hack-skills/tree/main/skills/file-access-vuln
Command: npx skills add https://github.com/yaklang/hack-skills --skill file-access-vuln

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured approach to testing and discovering file-access vulnerabilities in download endpoints, file path handling, and upload and sharing workflows.

Core Features & Use Cases

  • Path traversal and local file inclusion checks across endpoints that accept file paths or user-supplied names.
  • Validation of upload pipelines, storage paths, and preview/share boundaries to prevent unauthorized access or leakage.
  • Guided workflows that help security testers reproduce real-world scenarios such as archive extraction and cross-system filename handling.

Quick Start

Run a targeted assessment by loading the File Access Router skill and following the recommended flow to identify LFI and path traversal risks in your web app.

Frequently Asked Questions about file-access-vuln

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test for path traversal and local file inclusion vulnerabilities in web endpoints?▼

To test for path traversal and local file inclusion, this Skill validates vulnerabilities across parameterized paths, download endpoints, and user-supplied file names to detect unauthorized file access risks.

What is the best way to check upload pipelines for unauthorized file access or leakage?▼

Checking upload pipelines involves validating storage paths, upload processing workflows, and preview or share boundaries to prevent unauthorized access or data leakage across sharing boundaries.

Can I use this to test archive extraction and cross-system filename handling scenarios?▼

Yes, you can test archive extraction and cross-system filename handling. It provides guided workflows to help security testers reproduce these real-world boundary-testing scenarios.

Does this approach work for validating access controls on file preview and sharing boundaries?▼

Yes, this approach works for validating access controls on file preview and sharing boundaries. It tests boundaries where path traversal or access controls may fail during file sharing workflows.

What web-security vulnerabilities does this file access testing target?▼

This file access testing targets web-security vulnerabilities including local file inclusion, path traversal, and upload security flaws. It assesses download endpoints, parameterized paths, and upload processing workflows.

Related Skills

Explore More Software Engineering Skills→
zebbernzebbern
5

ffuf-fuzz

Fuzz web targets to discover hidden endpoints, directories, and misconfigurations.

Community
Advanced
salmanabdurrahmansalmanabdurrahman

vuln-lfi-rfi

Validate LFI, RFI, and path traversal via canary files and encoding bypass tests.

Community
Advanced
NickCrewNickCrew
29

owasp-top-10

Identify OWASP Top 10 security vulnerabilities in web applications.

Community
Advanced
cmndcntrlcybercmndcntrlcyber
3

hunt-file-upload

Identify and demonstrate file upload security bypass techniques in web applications.

Community
Advanced