hunt-lfi
From the author
Hunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal
Install
npx skills add lingxling/awesome-skills-cn --skill hunt-lfi -a claude-code
Installs to .claude/skills/hunt-lfi/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
Want your agent to suggest skills while you type? See how to use skills from your IDE.
Safety checks on SKILL.md
- Reads credential files such as ~/.ssh or ~/.awsLow
Why 83
Security95
Provenance70
Maintenance100
Licence100
Adoption42
aiqbench computes the trust score from public signals. It is not a security audit, so read a skill before you install it.
Similar skills
Closest to this one by what they do and when they are used.
- hunt-ldapsickn33/agentic-awesome-skillsHunt LDAP Injection and XPath InjectionOther★ 48.5K
- hunt-atosickn33/agentic-awesome-skillsHunt account takeover taxonomyOther★ 48.5K
- hunt-samlsickn33/agentic-awesome-skillsHunt SAML / SSO attacks.Other★ 48.5K
- file-path-traversalzebbern/claude-code-guideThis skill should be used when the user asks to "test for directory traversal", "exploit path traversal vulnerabilities", "read arbitrary files through web applications", "find LFI vulnerabilities", or "access files outside web root". It provides comprehensive file path traversal attack and testing methodologies.Security★ 4.7K
- Strix•路径穿越与文件包含asdfgh1445/ctf-super-hubStrix 路径穿越与文件包含测试手册,覆盖本地/远程文件访问与代码执行链;触发名:strix-path-traversal-lfi-rfiOther★ 838
- hunt-uploadEncod3d-Sec/TORCHFile upload attack hunting - extension/content-type/magic-byte bypass to web-shell RCE, path traversal in filename, SVG/XML XSS, zip slip, and pixel-flood DoS. Wiki-first, FIND schema output.Other★ 335
Ratings & reviews
—
no reviews
Tried this skill? Rate it to help others. Sign in
Discussion
Join the discussion. Sign in