关于
This skill provides a structured methodology for detecting and exploiting file path traversal vulnerabilities in web applications. It guides users through identifying vulnerable parameters, applying various bypass techniques—such as URL encoding, double encoding, and null bytes—and escalating vulnerabilities from Local File Inclusion (LFI) to Remote Code Execution (RCE). It serves as a comprehensive resource for security audits, providing detailed target file lists for Linux and Windows environments alongside essential remediation guidance to help developers secure filesystem APIs.
