Summary
本地文件包含(LFI)/远程文件包含(RFI)/任意文件读取的检测和利用。当目标有文件包含参数(page/file/include/lang)、PHP应用、日志文件可写时使用。包含file_exists()陷阱、PHP include()语法错误诊断、日志投毒正确payload、pearcmd.php利用、PHP…
wgpsec/aboutsecurity
本地文件包含(LFI)/远程文件包含(RFI)/任意文件读取的检测和利用。当目标有文件包含参数(page/file/include/lang)、PHP应用、日志文件可写时使用。包含file_exists()陷阱、PHP include()语法错误诊断、日志投毒正确payload、pearcmd.php利用、PHP…
npx skills add https://github.com/wgpsec/aboutsecurity
本地文件包含(LFI)/远程文件包含(RFI)/任意文件读取的检测和利用。当目标有文件包含参数(page/file/include/lang)、PHP应用、日志文件可写时使用。包含file_exists()陷阱、PHP include()语法错误诊断、日志投毒正确payload、pearcmd.php利用、PHP…
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
PluginEval quality methodology — dimensions, rubrics, statistical methods, and scoring formulas…
5.9K installsAudit websites and landing pages for conversion issues and design evidence-based A/B tests. Use…
4.9K installs>- Reconnaissance and methodology playbook. Use when mapping assets, discovering endpoints, fin…
3.2K installs>- Use after competitive-platform-analysis has produced a tiered competitor set. Scores each co…
2.9K installsSPARC (Specification, Pseudocode, Architecture, Refinement, Completion) comprehensive developme…
1.2K installsMaster the complete penetration testing lifecycle from reconnaissance through reporting. This s…
711 installsOther skills from wgpsec/aboutsecurity · top by installs.
npx skills add https://github.com/wgpsec/aboutsecurity
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
master