file-access-vuln

Original：🇨🇳 Chinese

Translated

Entry P1 category router for file access and upload workflows. Use when testing download endpoints, file paths, local file inclusion, upload flows, preview pipelines, archive extraction, or storage and sharing boundaries.

3installs

Sourceyaklang/hack-skills

Added on2026-04-09

NPX Install

npx skill4agent add yaklang/hack-skills file-access-vuln

SKILL.md Content (Chinese)

View Translation Comparison →

File Access Router

This is the category entry for file systems, download APIs, upload links, and file preview processing.

When to Use

Parameters, file names, download endpoints or import processes affect the file path
The target supports upload, preview, transcoding, decompression, sharing, download or proxy file access
You need to determine whether the current problem is more inclined to path traversal, LFI, or upload verification and processing chain issues

Skill Map

Path Traversal LFI: path traversal, file reading, wrapper, inclusion chain
Upload Insecure Files: upload verification, storage path, processing chain, overwriting, preview and sharing boundaries

Recommended Flow

First check whether the entry is a path parameter, download endpoint or upload process
Then check which segment the problem occurs in: accept, store, process, or serve
Small sample path chains and upload bypass samples have been merged into the main topic skill, and no longer use separate payload entries

Related Categories

injection-checking
business-logic-vuln