Communitygithub.com

valdiviasec/mosrai

Use when testing apps that accept media uploads and process them with ffmpeg (audio transcription, video processing, image conversion). If the upload endpoint does not validate file magic bytes and ffmpeg is invoked without protocol restrictions, an HLS playlist with file:// segment URLs achieves cross-user file read, bypassing all application-level ACLs. Triggers - "media upload", "audio processing", "ffmpeg", "transcription", "file upload", "HLS", "m3u8", "file read", "LFI via media", "cross-u

mosrai 是什麼?

mosrai is a Claude Code agent skill that use when testing apps that accept media uploads and process them with ffmpeg (audio transcription, video processing, image conversion). If the upload endpoint does not validate file magic bytes and ffmpeg is invoked without protocol restrictions, an HLS playlist with file:// segment URLs achieves cross-user file read, bypassing all application-level ACLs. Triggers - "media upload", "audio processing", "ffmpeg", "transcription", "file upload", "HLS", "m3u8", "file read", "LFI via media", "cross-u.

相容平台~Claude Code~Codex CLI~Cursor
npx skills add https://github.com/valdiviasec/mosrai/tree/main/skills/ffmpeg-hls-crossuser-fileread

在你喜歡的 AI 中提問

開啟一個已預先載入此 Agent Skill 的新對話。

說明文件

mosrai 是做什麼的?

Use when testing apps that accept media uploads and process them with ffmpeg (audio transcription, video processing, image conversion). If the upload endpoint does not validate file magic bytes and ffmpeg is invoked without protocol restrictions, an HLS playlist with file:// segment URLs achieves cross-user file read, bypassing all application-level ACLs. Triggers - "media upload", "audio processing", "ffmpeg", "transcription", "file upload", "HLS", "m3u8", "file read", "LFI via media", "cross-u

相關技能