file-access-vuln
yaklang/hack-skills
Router for file access vulnerabilities: path traversal, LFI, and upload workflow testing.
What is file-access-vuln?
Entry point for identifying and testing file access vulnerabilities across download endpoints, file paths, local file inclusion, upload flows, and storage boundaries. Use this to determine whether an issue involves path traversal/LFI or upload validation/processing chain problems.
- Routes to path traversal and LFI testing when file paths are influenced by user input
- Routes to upload validation testing for file acceptance, storage, and processing chains
- Identifies vulnerabilities in download endpoints and file preview pipelines
- Detects issues in archive extraction and file sharing boundaries
- Distinguishes between path manipulation and upload-processing vulnerabilities
How to install file-access-vuln
npx skills add https://github.com/yaklang/hack-skills --skill file-access-vulnHow to use file-access-vuln
- 1.Identify the entry point: is it a path parameter, download endpoint, or upload workflow?
- 2.Locate the vulnerability stage: accept, store, process, or serve
- 3.Route to Path Traversal LFI skill for path manipulation issues
- 4.Route to Upload Insecure Files skill for upload validation and processing chain issues
- 5.Use merged samples within the routed skills; no separate payload entry needed
Use cases
- Testing download endpoints where parameters control file paths
- Auditing upload workflows for validation and storage bypass risks
- Checking file preview and transcoding pipelines for access control issues
- Testing archive extraction for path traversal vulnerabilities
- Verifying file sharing and storage boundary enforcement
- Security testers auditing file handling features
- Penetration testers assessing upload and download functionality
- Application security engineers reviewing file access controls
- Developers implementing secure file operations
file-access-vuln FAQ
Use this skill first to identify which category your issue falls into. Then route to Path Traversal LFI for path manipulation or Upload Insecure Files for upload validation problems.
No. Small path-chain and upload-bypass samples are merged into the main topic skills (Path Traversal LFI and Upload Insecure Files). Route to those skills for specific payloads.
Download endpoints, file paths, local file inclusion, upload flows, preview pipelines, archive extraction, and storage/sharing boundaries.
Check if user input influences the file path being accessed (path traversal) or if the issue is in upload validation and processing (upload insecure files).
Full instructions (SKILL.md)
Source of truth, from yaklang/hack-skills.
name: file-access-vuln description: >- Entry P1 category router for file access and upload workflows. Use when testing download endpoints, file paths, local file inclusion, upload flows, preview pipelines, archive extraction, or storage and sharing boundaries.
File Access Router
This is the routing entry point for filesystem paths, download endpoints, upload pipelines, and file preview handling.
When to Use
- Parameters, filenames, download endpoints, or import flows influence file paths
- The target supports upload, preview, transcoding, extraction, sharing, download, or proxied file access
- You need to decide whether this is path traversal/LFI or an upload-validation/processing-chain issue
Skill Map
- Path Traversal LFI: path traversal, file read, wrapper abuse, include chains
- Upload Insecure Files: upload validation, storage paths, processing chains, overwrite risk, preview/share boundaries
Recommended Flow
- First identify whether the entry point is a path parameter, download endpoint, or upload workflow
- Then locate whether the issue appears in accept, store, process, or serve stages
- Small path-chain and upload-bypass samples are merged into the main topic skills; no separate payload entry is needed
Related Categories
- injection-checking
- business-logic-vuln
Related skills
More from yaklang/hack-skills and the wider catalog.
format-string-exploitation
Exploit format string vulnerabilities to leak memory, overwrite GOT/hooks, and achieve RCE via printf-family functions.
ghost-bits-cast-attack
Bypass Java WAF/IDS by exploiting silent char-to-byte narrowing in 16-bit Unicode to 8-bit ASCII conversion.
graphql-and-hidden-parameters
Discover hidden GraphQL fields, introspection gaps, and batching vulnerabilities to expose authorization flaws.
hack
Entry-point router for web security testing, API security, and bug bounty work.
hash-attack-techniques
Expert hash attack techniques for length extension, MD5/SHA1 collisions, HMAC timing leaks, and birthday attacks.
heap-exploitation
Expert glibc heap exploitation: ptmalloc2 internals, tcache/fastbin attacks, and version-specific techniques.