domains / families / security / file-access-vuln

file-access-vuln

separate

Entry P1 category router for file access and upload workflows. Use when testing download endpoints, file paths, local file inclusion, upload flows, preview pipelines, archive extraction, or storage and sharing boundaries.

When to use

• Parameters, filenames, download endpoints, or import flows influence file paths
• The target supports upload, preview, transcoding, extraction, sharing, download, or proxied file access
• You need to decide whether this is path traversal/LFI or an upload-validation/processing-chain issue

Skill page

Source