📁
QualityJavaScript

Strix 不安全文件上传

by asdfgh1445

Strix 不安全文件上传 is a Quality skill for Claude Code, published by asdfgh1445 in ctf-super-hub.

764 stars96 forkson asdfgh1445/ctf-super-hubAdded 2026/08/23+1% in starsRepository updated 2026/04/23
View source on GitHubDownload repo ZIP
agent-skillsai-agentscodexcryptographyctfctf-toolsforensicsosintpwnreverse-engineeringweb-security
Install in seconds
Install Strix 不安全文件上传
Copy Strix 不安全文件上传 into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.
terminal
npx degit https://github.com/asdfgh1445/ctf-super-hub/tree/main/strix-insecure-file-uploads ~/.claude/skills/strix-insecure-file-uploads

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/asdfgh1445/ctf-super-hub.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file
strix-insecure-file-uploads/SKILL.md in asdfgh1445/ctf-super-hub
Installs to
~/.claude/skills/strix-insecure-file-uploads
Collection
One of 25 skills cataloged from this repository
Category
Quality — 1354 skills

What Strix 不安全文件上传 does

Strix 不安全文件上传 covers testing upload surfaces for extension bypasses, Content-Type manipulation, path traversal, and processing races. Use it when reviewing file upload validation, storage, and serving behavior.

Strix 不安全文件上传 is cataloged under Quality on DirSkills. Strix 不安全文件上传 comes from a repository tagged agent-skills, ai-agents, codex, cryptography and ctf.

Documentation

README

Insecure File Uploads

Upload surfaces are high risk: server-side execution (RCE), stored XSS, malware distribution, storage takeover, and DoS. Modern stacks mix direct-to-cloud uploads, background processors, and CDNs—authorization and validation must hold across every step.

Attack Surface

  • Web/mobile/API uploads, direct-to-cloud (S3/GCS/Azure) presigned flows, resumable/multipart protocols (tus, S3 MPU)
  • Image/document/media pipelines (ImageMagick/GraphicsMagick, Ghostscript, ExifTool, PDF engines, office converters)
  • Admin/bulk importers, archive uploads (zip/tar), report/template uploads, rich text with attachments
  • Serving paths: app directly, object storage, CDN, email attachments, previews/thumbnails

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Strix 不安全文件上传

  • What else does asdfgh1445 publish alongside Strix 不安全文件上传?

    Strix 不安全文件上传 is one of 25 skills that DirSkills catalogs from asdfgh1445/ctf-super-hub, the repository it ships in. Its siblings there include CTF AI/ML Attack Hub, CTF Binary Exploitation and CTF Challenge Triage. Each one is a separate skill with its own page in this directory, installs the same way Strix 不安全文件上传 does, and is maintained by asdfgh1445 in that same repository. The rest of the collection is listed on the asdfgh1445/ctf-super-hub page.

  • How does Strix 不安全文件上传 compare to other Quality skills?

    Strix 不安全文件上传 ranks #1014 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Strix 不安全文件上传 against them. Open each page to compare what they document and how they install.

More from asdfgh1445/ctf-super-hub

Strix 不安全文件上传 is one of 25 skills cataloged on DirSkills from asdfgh1445/ctf-super-hub.

See all 25 skills →
🤖
1w ago

CTF AI/ML Attack Hub

CTF AI/ML Attack Hub collects techniques for adversarial examples, model extraction, prompt injection, membership inference, poisoning, LoRA abuse, and LLM jailbreaking. Use it when a challenge involves attacking or analyzing an AI or ML system.
AI Engineering
76496
💥
1w ago

CTF Binary Exploitation

CTF Binary Exploitation covers buffer overflows, format strings, heap exploitation, ROP, ret2libc, shellcode, seccomp bypass, and sandbox escape for pwn-style CTF challenges. Use it when solving binary exploitation tasks.
Quality
76496
🏁
1w ago

CTF Challenge Triage

CTF Challenge Triage classifies a CTF challenge, performs light initial triage, and routes it to the appropriate ctf-* skill. It can also act as the entry point when the category is already clear.
AI Engineering
76496
🔐
1w ago

CTF Cryptography

CTF Cryptography provides quick references for cryptography and math-based CTF challenges, including RSA, AES, ECC, lattices, PRNGs, ZKP, and related attack patterns. Use it when solving crypto puzzles or checking which technique applies.
Quality
76496
🕵️
1w ago

CTF Forensics

CTF Forensics covers disk images, memory dumps, logs, PCAPs, steganography, registry artifacts, audio signals, Docker images, coredumps, and deleted-file recovery for forensic CTF challenges. Use it when a puzzle requires extracting or reconstructing evidence from system and network artifacts.
Quality
76496
🧪
1w ago

CTF Malware Analysis

CTF Malware Analysis helps analyze malicious-script, PE/.NET, shellcode, and C2 traffic challenges in CTFs. Use it when you need to deobfuscate payloads, extract configs, decode protocols, or spot anti-analysis tricks.
Quality
76496

More Quality skills

Strix 不安全文件上传 is one of 1354 Quality skills cataloged on DirSkills, ranked #1014 by stars among them.

Browse all Quality skills →
⏱️
3w ago

Benchmark

Benchmark measures performance baselines, detects regressions before and after PRs, and compares stack alternatives for pages, APIs, and builds.
Quality
239.8K36.4K
⏱️
3w ago

Benchmark Optimization Loop

Benchmark Optimization Loop turns vague performance goals into a bounded, measured optimization process. Use it when asked to make something faster, benchmark latency/throughput/cost, or choose the best implementation by repeated measured tests.
Quality
239.8K36.4K
🔌
3w ago

API Design Patterns

API Design Patterns provides conventions and best practices for designing consistent REST APIs. Use it when creating endpoints, reviewing contracts, handling pagination, error responses, status codes, filtering, or versioning.
Quality
239.8K36.4K