skills.rest
Prohao42
Prohao42COMMUNITY
Explore all skills by this author →
GitHub

file-access-vuln

Identify path traversal and local file inclusion risks in file access and upload workflows.

120|8|Updated Jun 2, 2026
Search Tags:#web-security#pentesting#file-access#lfi#path-traversal#upload-validation
One-click install
npx skills add https://github.com/Prohao42/aimy-sikll --skill file-access-vuln-prohao42
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: file-access-vuln
Source: https://github.com/Prohao42/aimy-sikll/tree/main/ai-mian/hack-skills/skills/file-access-vuln
Command: npx skills add https://github.com/Prohao42/aimy-sikll --skill file-access-vuln-prohao42

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a routing entry point for testing file access, download endpoints, and upload workflows, helping security testers identify path traversal, LFI, preview/sharing boundaries, and storage/extraction issues.

Core Features & Use Cases

  • Routing entry for filesystem paths, download endpoints, upload pipelines, and file previews.
  • Guidance on identifying path traversal, local file inclusion, insecure upload validation, and sharing/storage boundary issues.
  • Use Case: Evaluate how a web service handles file paths from user input, validates uploads, and serves previews or archives.

Quick Start

Analyze a target endpoint that accepts a file path parameter and an upload flow to uncover improper handling.

Frequently Asked Questions about file-access-vuln

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test for path traversal and local file inclusion in web endpoints?▼

To test for path traversal and local file inclusion, analyze target endpoints that accept file path parameters to uncover improper handling of filesystem paths and user input. This surfaces misconfigurations in download endpoints and preview boundaries.

What is the best way to assess file upload validation workflows for security weaknesses?▼

Assessing file upload validation involves evaluating how a web service handles upload pipelines, validates uploaded files, and manages storage boundaries. This identifies insecure upload validation and extraction issues within the workflow.

How does a path traversal vulnerability affect file previews and sharing features?▼

Path traversal affects file previews and sharing features by exploiting improper filesystem path handling from user input, allowing unauthorized access to files outside intended sharing boundaries and storage directories.

Can I use this to evaluate archive extraction and download endpoints together?▼

Yes, you can evaluate archive extraction and download endpoints together. The Skill routes testing across filesystem paths, upload pipelines, archives, and file previews to surface misconfigurations in these workflows.

What security misconfigurations should I look for when testing file access endpoints?▼

When testing file access endpoints, look for path traversal, local file inclusion, insecure upload validation, and sharing or storage boundary issues caused by improper handling of user-supplied file paths.

Related Skills

Explore More Software Engineering Skills→
lNwNllNwNl
2

file-access-vuln

Route security testing for file access and upload workflows by diagnosing parameter-to-path mappings.

Community
Basic
crazyMarkycrazyMarky
277

exploit-file-download

Detect and exploit arbitrary file download vulnerabilities using path traversal techniques.

Community
Intermediate
YukiIto1999YukiIto1999

server-side

Identify server-side vulnerabilities across web applications and APIs.

Community
Advanced
sayseven7sayseven7
11

file-access-vuln

Route file access and upload issues to the correct security testing path.

Community
Basic