Strix•路径穿越与文件包含

Analyze web endpoints for path traversal, LFI, and RFI vulnerabilities.

735|96|Updated Apr 23, 2026
One-click install
npx skills add https://github.com/asdfgh1445/ctf-super-hub --skill strix-asdfgh1445
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Strix•路径穿越与文件包含
Source: https://github.com/asdfgh1445/ctf-super-hub/tree/main/strix-path-traversal-lfi-rfi
Command: npx skills add https://github.com/asdfgh1445/ctf-super-hub --skill strix-asdfgh1445

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps security analysts and developers identify and understand path traversal, local file inclusion, and remote file inclusion vulnerabilities, aiding in secure web application testing and mitigation.

Core Features & Use Cases

  • Vulnerability Detection: Analyzes web application input points to detect potential path manipulation flaws.
  • Exploit Testing Guidance: Provides detailed methods to verify exposure to LFI/RFI issues.
  • Use Case: During security assessments, use this Skill to evaluate if a web endpoint is susceptible to directory traversal or remote file inclusion, and to develop effective mitigation strategies.

Quick Start

Use the skill to analyze a web application endpoint for path traversal vulnerabilities by inputting test URLs and parameters.

Frequently Asked Questions about Strix•路径穿越与文件包含

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test a web application endpoint for path traversal vulnerabilities?

To test for path traversal vulnerabilities, analyze web application input points by inputting test URLs and parameters to detect potential directory traversal flaws. This evaluates if the endpoint is susceptible to path manipulation.

What is the difference between LFI and RFI vulnerabilities in web applications?

LFI and RFI vulnerabilities involve file inclusion flaws where LFI targets local files and RFI targets remote files. This Skill assesses both through comprehensive analysis to help evaluate exposure risks effectively.

Can I use this to check if my web parameters are susceptible to remote file inclusion?

Yes, you can use this Skill to check web parameters for remote file inclusion susceptibility. It analyzes input points and provides exploit testing guidance to verify exposure to RFI issues during security assessments.

What's the best way to verify local file inclusion exposure risks?

The best way to verify local file inclusion exposure risks is through comprehensive scanning and testing techniques. This provides detailed methods to verify LFI issues and develop effective mitigation strategies for secure deployment.

Why do I need to assess path traversal flaws during web application security assessments?

You need to assess path traversal flaws to identify directory traversal risks and ensure secure coding practices. This helps security professionals evaluate exposure risks effectively and develop mitigation strategies for web applications.