domains / families / security / path-traversal-lfi

path-traversal-lfi

separate

Path traversal and LFI playbook. Use when file paths, download endpoints, include operations, archive extraction, or wrapper behavior may expose filesystem control.

When to use

• file paths
• download endpoints
• include operations
• archive extraction
• wrapper behavior
• encoding bypass sequences
• filter bypass
• log poisoning to RCE

When not to use

• upload workflows
• Java backend targets with WAF-blocked standard chains

Skill page

Source