Detect file upload and path traversal vulnerabilities in codebases.
npx skills add https://github.com/n4igme/randscript --skill vuln-file-path
Please help me install this Agent Skill. Skill: vuln-file-path Source: https://github.com/n4igme/randscript/tree/main/llm/skills/scode/vuln-file-path Command: npx skills add https://github.com/n4igme/randscript --skill vuln-file-path
Scans codebases to identify unsafe file handling that enables unrestricted file uploads and directory traversal, helping teams prioritize remediation.
Run vuln-file-path against the target repository to begin the vulnerability scan.
High-intent search queries and answers about installing and using this skill.
To scan for file upload and path traversal vulnerabilities, run this tool against your target repository to detect unsafe file handling, dynamic file serving, and user-supplied path patterns.
An unrestricted file upload vulnerability occurs when web applications lack validation on file handlers, allowing attackers to upload malicious files that can lead to arbitrary code execution or system compromise.
Finding directory traversal flaws requires analyzing dynamic file serving code to detect unsafe patterns where user-supplied paths allow unauthorized access to files outside the intended web root directory.
Yes, you can use this security scan for bug bounty preparation to surface critical flaws in application upload endpoints and path handling before submitting vulnerability reports.
Yes, this vulnerability analysis reads priority targets from threat-model.md and recon.md to focus the codebase scan, appending structured findings to the vulnerabilities.md file for traceability.
Automated path traversal detection tools are limited to identifying known unsafe patterns in code, meaning they may miss complex logic flaws requiring manual code review to uncover arbitrary write vulnerabilities.
n4igmeDetect authentication and session management flaws from threat-model.md and recon.md.
devtintTest file upload endpoints for security vulnerabilities with malicious payloads.
NickCrewIdentify OWASP Top 10 security vulnerabilities in web applications.
xlelibertyPerform offensive security assessments with vulnerability scanning and penetration testing.
