file-inclusion

Test local and remote file inclusion vulnerabilities through payloads and protocols.

518|47|Updated Nov 10, 2025

Search Tags:#web-security #vulnerability-detection #lfi #rfi #file-inclusion

One-click install

npx skills add https://github.com/yhy0/CHYing-agent --skill file-inclusion

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: file-inclusion
Source: https://github.com/yhy0/CHYing-agent/tree/main/chying_agent/skills/file-inclusion
Command: npx skills add https://github.com/yhy0/CHYing-agent --skill file-inclusion

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates file inclusion testing, including LFI and RFI, template loading, and directory traversal, helping identify insecure file handling and remote code execution pathways.

Core Features & Use Cases

LFI & RFI Vectors: Test local and remote file inclusion through various payloads and protocols.
Template & Log Inclusion: Verify inclusion through template loaders and log poisoning pathways.
Use Case: Validate a vulnerable page that takes a file parameter to read sensitive server files.

Quick Start

Example: Activate the file-inclusion skill against http://target.example/page?file=../../etc/passwd and inspect the retrieved content.