Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-conf-13
Test for Path Confusion
Passed 20 of 23 test cases with the skill, and 13 of 23 without it.
and 5 more in the full report
7 fixed13 passed either way3 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 7 test cases the skill fixed. Same model, same prompt, with and without the skill.
We need to log our penetration testing finding for URL path interpretation discrepancies under OWASP Web Security Testing Guide v4.2. What is the official WSTG subcategory test ID for Path Confusion?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies the WSTG test ID as WSTG-CONF-13 | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-CONF-13
Test for Path Confusion
Path confusion vulnerabilities arise when web servers, application frameworks, or caching systems interpret URL paths differently. Attackers can exploit these inconsistencies to bypass security controls, trigger web cache deception, or access restricted resources. This test identifies path handling discrepancies that could lead to security vulnerabilities.
| Attack | Description |
|---|---|
| Web Cache Deception | Cache stores sensitive responses |
| Path Traversal | Access unauthorized files |
| Security Bypass | Bypass authentication/authorization |
| Cache Poisoning | Poison cache with malicious content |
test cases passed, vs 13 / 23 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.