Find security gaps beyond the file upload.
What it does
Guides testing of file-upload features to identify validation bypasses, unsafe processing, unauthorized file access, and overwrite vulnerabilities.
When to use it
Use when a target accepts files, imports, avatars, media, documents, or archives and needs end-to-end upload security testing.
How to use it
Give it a file-upload target; it assesses upload validation, retrieval, processing, and tenant-boundary vulnerabilities.
What you provide
- the file-upload target
Good to know
- cannot be undone: upload endpoints
Latest review
What you need · 0
No setup requirements listed.
Access · 3
This skill
upload endpoints
Write
Uploads files and tests overwrites (irreversible)
uploaded file URLs
Read
Checks access to uploaded files
web server
Execute
Uploaded server-side code