domains / families / security / upload-insecure-files

upload-insecure-files

separate

Insecure file upload playbook. Use when testing upload validation, storage paths, processing pipelines, preview behavior, overwrite risks, and upload-to-RCE chains.

When to use

• testing upload validation
• storage path abuse
• processing pipelines
• preview behavior
• overwrite risks
• upload-to-RCE chains
• validation bypass
• post-upload access

When not to use

• web server parsing vulnerabilities
• PUT method exploitation
• specific CVEs (WebLogic, Flink, Tomcat)

Skill page

Source