Assess file-upload and local-file-inclusion vulnerabilities in web applications.
npx skills add https://github.com/Q16G/aster --skill file-and-path-sec
Please help me install this Agent Skill. Skill: file-and-path-sec Source: https://github.com/Q16G/aster/tree/main/skills/pentest/file-and-path-sec Command: npx skills add https://github.com/Q16G/aster --skill file-and-path-sec
The skill helps security testers systematically identify and document vulnerabilities in file upload workflows and path traversal scenarios, reducing blind spots and speeding remediation.
Run the file-and-path-sec skill against a target web application and apply the defined upload and LFI checks.
High-intent search queries and answers about installing and using this skill.
To check file upload vulnerabilities, this skill evaluates upload validation mechanisms on web application forms, using bash tooling and ripgrep to identify weak filtering and document evidence for remediation across targeted endpoints.
Auditing file upload validation requires systematically enumerating upload weaknesses and path traversal risks. This skill orchestrates deterministic checks across file upload forms and download endpoints to document findings and evidence for faster remediation.
You can use ripgrep to search for path traversal vulnerabilities, as this skill leverages ripgrep for content searches across directories and files. It reads local files and lists directories to identify local file inclusion risks during security testing workflows.
Documenting file upload and LFI vulnerabilities involves executing signposting checks, manual verification, and evidence collection. This skill guides testers through deterministic steps to systematically record findings for remediation across file upload and path parameter endpoints.
Automated vulnerability testing is suited for web applications with file upload forms and path parameters requiring repeated, scalable testing. This skill provides deterministic steps for enumerating LFI risks and upload weaknesses, reducing blind spots compared to manual checks.
stahuraManage Domo FileSets via /api/files/v1 endpoints for upload, download, listing, and search.
jokken79Detect and validate file path traversal vulnerabilities in web applications.
sayseven7Route file access and upload issues to the correct security testing path.
langbyyiDetect and exploit path traversal and LFI vulnerabilities in web applications.
