Java Web 源码文件上传漏洞审计工具。用于从源码中识别所有文件上传入口并分析上传路径、文件名处理与校验逻辑风险。适用于：(1) 识别 Servlet/Commons FileUpload 与 Spring Boot MultipartFile 上传实现，(2) 发现任意文件上传、路径穿越与可执行文件上传风险，(3) 分析文件名/目录/类型/大小校验是否缺失或可绕过，(4) 审计上传目录与访问控制。**支持反编译 .class/.jar 文件提取上传逻辑**。结合 java-route-mapper 使用可实现完整的路由+文件上传审计。
Key Features
- Comprehensive skill evaluation and performance tracking
- Community-driven ratings and reviews
- Easy integration with Claude Code
- Regular updates and maintenance
Quick Start
TopRank Skills install RuoJi6/java-file-upload-auditchat Comments (0)
Sign in to join the discussion and leave a comment.
Skill Details
GitHub Stars
256
GitHub Forks
32
Created
Mar 2026
Last Updated
5个月前
tools
tools debugging
Related Skills
Build your own?
Join 12,000+ developers contributing to the Claude ecosystem.
No comments yet. Be the first to share your thoughts!