File Path Traversal Testing
This helps Claude systematically test for directory traversal vulnerabilities by probing endpoints with payloads like `../../../etc/passwd` to see if your app leaks sensitive files outside its intended directory. You'd use it during security reviews or penetration testing when you need to verify that user input touching filesystem operations is properly sanitized. It's built for working with Burp Suite, ZAP, and fuzzing tools like ffuf. Fair warning: the skill failed both Socket and Snyk security audits, which is somewhat ironic for a security testing template, so review the code yourself before running it in any sensitive environment. Worth having in your toolkit if you're doing web app security work, but audit it first.
- GitHub stars
- 30.2K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add davila7/claude-code-templates --skill 'File Path Traversal Testing' --agent claude-codeInstalls into .claude/skills of the current project.
Files
This helps Claude systematically test for directory traversal vulnerabilities by probing endpoints with payloads like `../../../etc/passwd` to see if your app leaks sensitive files outside its intended directory. You'd use it during security reviews or penetration testing when you need to verify that user input touching filesystem operations is properly sanitized. It's built for working with Burp Suite, ZAP, and fuzzing tools like ffuf. Fair warning: the skill failed both Socket and Snyk security audits, which is somewhat ironic for a security testing template, so review the code yourself before running it in any sensitive environment. Worth having in your toolkit if you're doing web app security work, but audit it first.
Browse the repository on GitHubSponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/davila7/claude-code-templates
- Category
- Testing & QA
- First seen
- Jun 3, 2026
More from davila7/claude-code-templates
All 618- Git Commit Helper
- Hook Development
- HTML Injection Testing
- IDOR Vulnerability Testing
- Linux Privilege Escalation
- Linux Production Shell Scripts
- MCP Integration
- Metasploit Framework
- Network 101
- PDF Processing
- PDF Processing Pro
- Pentest Checklist
- Pentest Commands
- Plugin Settings
- Plugin Structure
- Privilege Escalation Methods
- Red Team Tools And Methodology
- Security Scanning Tools
- SEO Optimizer
- Shodan Reconnaissance And Pentesting
- Skill Development
- SMTP Penetration Testing
- SQL Injection Testing
- SQLMap Database Penetration Testing
Recommended
More Testing & QA
HTML Injection Testingdavila7/claude-code-templatesThis skill should be used when the user asks to "test for HTML injection", "inject HTML into web pages", "perform HTML injection attacks", "deface web applicati0skills.sh installsIDOR Vulnerability Testingdavila7/claude-code-templatesThis skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enu0skills.sh installsSMTP Penetration Testingdavila7/claude-code-templatesThis skill should be used when the user asks to "perform SMTP penetration testing", "enumerate email users", "test for open mail relays", "grab SMTP banners", "0skills.sh installsSQL Injection Testingdavila7/claude-code-templatesThis skill should be used when the user asks to "test for SQL injection vulnerabilities", "perform SQLi attacks", "bypass authentication using SQL injection", "0skills.sh installs
exp-mock-usage-analysisdotnet/skillsAudits .NET test mock usage by tracing each mock setup through the production code's execution path to find dead, unreachable, redundant, or replaceable mocks. 0skills.sh installsexp-test-maintainabilitydotnet/skillsDetects duplicate boilerplate, copy-paste tests, and structural maintainability issues across .NET test suites. Use when the user asks to reduce repetition, con0skills.sh installs