Skill UI

Run targeted file path traversal assessments to find directory traversal and LFI vulnerabilities across web parameters, verify exploitation payloads, and document sensitive files exposed via automated fuzzing and manual checks.

Run targeted file path traversal assessments to find directory traversal and LFI vulnerabilities across web parameters, verify exploitation payloads, and document sensitive files exposed via automated fuzzing and manual checks.

This tool provides a comprehensive framework for analyzing web server logs (Apache/Nginx) to detect various security threats. It uses advanced regex matching against OWASP attack signatures to identify SQL injection, Local File Inclusion, and Directory Traversal attempts, alongside behavioral analysis for brute-force attacks and web scanner fingerprints. The system also enriches data using GeoIP for source attribution, generating a prioritized report for SOC analysts.

This comprehensive guide details methods for testing web applications against directory traversal (path traversal) and local/remote file inclusion (LFI/RFI) vulnerabilities. It covers advanced techniques, including path manipulation, encoding bypasses, and automated fuzzing using tools like ffuf and dotdotpwn. Use this during authorized penetration tests to assess file download, view, or include functionality.

A utility for interacting with the Lark/Feishu communication directory. It allows users to search for employees by name or email to obtain an open_id, or use an open_id to retrieve comprehensive profile data, including department, contact details, status, and signature. Ideal for preparing information before sending messages or scheduling events. Note that department tree traversal and organizational structure mapping require native OpenAPI calls.