Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-authz-01
Testing Directory Traversal File Include
Passed 19 of 23 test cases with the skill, and 17 of 23 without it.
3 fixed16 passed either way3 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
What official OWASP Web Security Testing Guide identifier and exact test title correspond to evaluating directory traversal and file inclusion flaws?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies the test ID as WSTG-AUTHZ-01 | Missed | Passed |
| States the test name as Testing Directory Traversal File Include | Passed | Passed |
The instructions your model reads when the skill loads.
WSTG-AUTHZ-01
Testing Directory Traversal File Include
Directory traversal (also known as path traversal) is a vulnerability that allows attackers to access files and directories outside the intended directory by manipulating file path parameters. Attackers use special characters like ../ to navigate the file system and access sensitive files such as configuration files, password files, or application source code.
| Target File | Purpose |
|---|---|
/etc/passwd | Linux user accounts |
/etc/shadow | Linux password hashes |
C:\Windows\win.ini | Windows system file |
C:\Windows\System32\config\SAM | Windows credentials |
/var/log/apache2/access.log | Web server logs |
WEB-INF/web.xml | Java app config |
.env | Environment variables |
test cases passed, vs 17 / 23 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.