关于
The File Path Traversal Testing skill provides Claude with a specialized framework for conducting security audits on web applications that handle filesystem operations. It covers the entire lifecycle of a traversal attack, from identifying vulnerable parameters like file, path, or template, to executing complex bypasses involving encoding, null bytes, and PHP wrappers. This skill is ideal for security researchers and developers who need to verify if an application can be forced to disclose sensitive files like /etc/passwd or Windows configuration files, and it offers actionable remediation code to secure these endpoints against unauthorized access.
