hunt-file-upload

You can detect file upload vulnerabilities by testing endpoints like /upload and /avatar with payloads including PHP shells, SVG JavaScript, and DOCX files with embedded XXE. The Skill applies bypass techniques such as extension bypass, null byte injection, and MIME spoofing to validate RCE, XSS, and SSRF outcomes.

Effective file upload bypass techniques include extension bypass, null byte injection, double extension manipulation, MIME spoofing, magic bytes prefixing, and polyglot files. Additional vectors include SVG JavaScript for XSS, DOCX files with embedded XXE, ZIP slip, and filename injection to evade validation mechanisms.

Validate file upload XSS and SSRF vulnerabilities by checking for reflected XSS in profile-photo URLs and confirming proper SSRF or XXE callbacks. This Skill validates bypass effectiveness through actual code execution for RCE and verifying server responses from SSRF or XXE callbacks.

Yes, you can test avatar and profile-picture endpoints for file upload vulnerabilities. This Skill specifically targets endpoints like /avatar, /profile-picture, /attachment, and /upload to identify RCE, XSS, and SSRF security issues using various attack vectors and validation mechanisms.

Detect XXE and ZIP slip vulnerabilities by uploading DOCX files with embedded XXE payloads and crafted ZIP archives to XML, DOCX, or ZIP processors. This Skill applies these bypass techniques to validate proper SSRF or XXE callbacks and identify path traversal outcomes.