Real file from a public repo · synced Sep 3, 2026
upload-insecure-files
Also load SCENARIOS.md when you need: - IIS parsing vulnerabilities — x.asp/ directory parsing, ; semicolon truncation (shell.asp;.jpg) - Nginx parsing misconfiguration — avatar.jpg/.php with cgi.fix_pathinfo=1 - Apache parsing — multiple extensions, AddHandler, CVE-2017-15715 \n (0x0A) bypass - PUT…
Works with
Install in three steps
- 1
Download the ZIP
One file per agent, plus INSTALL.md with the exact paths below.
- 2
Claude Code: copy SKILL.md into your skills folder
.claude/skills/upload-insecure-files/SKILL.md # this project ~/.claude/skills/upload-insecure-files/SKILL.md # every project
- 3
Other agents: use the matching file
skill.mdc goes in Cursor’s .cursor/rules/. AGENTS.md works as GitHub Copilot instructions, a legacy .cursorrules, or a Codex / Gemini CLI instructions file.

