Communitygithub.com

valdiviasec/mosrai

Use when testing apps that accept media uploads and process them with ffmpeg (audio transcription, video processing, image conversion). If the upload endpoint does not validate file magic bytes and ffmpeg is invoked without protocol restrictions, an HLS playlist with file:// segment URLs achieves cross-user file read, bypassing all application-level ACLs. Triggers - "media upload", "audio processing", "ffmpeg", "transcription", "file upload", "HLS", "m3u8", "file read", "LFI via media", "cross-u

O que é mosrai?

mosrai is a Claude Code agent skill that use when testing apps that accept media uploads and process them with ffmpeg (audio transcription, video processing, image conversion). If the upload endpoint does not validate file magic bytes and ffmpeg is invoked without protocol restrictions, an HLS playlist with file:// segment URLs achieves cross-user file read, bypassing all application-level ACLs. Triggers - "media upload", "audio processing", "ffmpeg", "transcription", "file upload", "HLS", "m3u8", "file read", "LFI via media", "cross-u.

Funciona com~Claude Code~Codex CLI~Cursor
npx skills add https://github.com/valdiviasec/mosrai/tree/main/skills/ffmpeg-hls-crossuser-fileread

Perguntar na sua IA favorita

Abre um novo chat com esta habilidade de agente já pré-carregada.

Documentação

O que mosrai faz?

Use when testing apps that accept media uploads and process them with ffmpeg (audio transcription, video processing, image conversion). If the upload endpoint does not validate file magic bytes and ffmpeg is invoked without protocol restrictions, an HLS playlist with file:// segment URLs achieves cross-user file read, bypassing all application-level ACLs. Triggers - "media upload", "audio processing", "ffmpeg", "transcription", "file upload", "HLS", "m3u8", "file read", "LFI via media", "cross-u

Habilidades Relacionadas