domains / families / security / offensive-file-upload

offensive-file-upload

separate

A checklist for assessing file upload vulnerabilities in web applications, covering techniques like MIME type bypass, extension bypass, and path traversal. It is used for pentesting or bug bounty hunting on file upload endpoints.

When to use

MIME type bypass
extension bypass
magic byte manipulation
path traversal in filenames
stored XSS via SVG/HTML upload
server-side processing attacks
race conditions
assessing file upload endpoints

Skill page

Source

Repository	Path
SnailSploit/Claude-Red	`Skills/web/offensive-file-upload/SKILL.md`