Identify and exploit path traversal and LFI vulnerabilities to expose sensitive files.
npx skills add https://github.com/Yliken/ai4 --skill path-traversal-lfi
Please help me install this Agent Skill. Skill: path-traversal-lfi Source: https://github.com/Yliken/ai4/tree/main/skills/path-traversal-lfi Command: npx skills add https://github.com/Yliken/ai4 --skill path-traversal-lfi
Path traversal and Local File Inclusion (LFI) exploitation playbook for expert security testing. It covers encoding bypass sequences, PHP wrappers, and RCE escalation paths to demonstrate and validate filesystem exposure in web applications.
Test path traversal and LFI vectors in a target application by chaining common wrappers and encoding techniques to reveal sensitive files.
High-intent search queries and answers about installing and using this skill.
You can escalate LFI to remote code execution by leveraging PHP wrappers like php://input, data://, and phar/zip, or by poisoning log files to execute injected payloads. PHP filter chains also enable payload execution through inclusion vectors.
Bypass path traversal filters by enumerating encoding variants such as URL encoding, double encoding, and overlong UTF-8 sequences. These techniques circumvent inadequate input validation to access sensitive files.
Yes, path traversal testing applies to both Linux and Windows targets. The approach requires adjusting traversal sequences and handling server-specific configurations to validate filesystem exposure across different operating systems.
Log poisoning for LFI escalation works by injecting executable code into server log entries, then including that log file via a local file inclusion vulnerability to trigger remote code execution.
Path traversal and LFI testing requires strict guardrails to avoid unintended harm. Maintain safe-practice scenarios and carefully handle encoding techniques to prevent accidental data corruption during vulnerability validation.
langbyyiDetect and exploit path traversal and LFI vulnerabilities in web applications.
akshay-naAnalyze authentication flows, trust boundaries, and supply chain risks in system designs.
yhy0Identify and exploit path traversal and file inclusion vulnerabilities in web applications.
salmanabdurrahmanTest input parameters for directory escape sequences and encoding bypasses.
