Skip to content

file

The file identity: a file read or write on the operator's host. Every field and what is required.

file reads or writes a file on the operator’s host. It is the object sandboxed scanners cannot reach. The target is ignored.

Write it in English

A file step reads as read "<path>" or write "<path>" with "<data>":

file write-it
  write "C:\\Temp\\exploit.mvg" with "push graphic-context\nfill 'url(x|id)'\npop graphic-context\n"

The directives

read and write

One of the two verbs is required. read "<path>" reads the file; write "<path>" with "<data>" writes the data.

The data is the bytes to write, required on a write step. The path is required on both.

Example

file read-flag
  read "{flag_path}"
  expect a flag

Give exploit research a common language.

Bring a PoC, a writeup, or an AI-generated draft into an Exploitmatic solution: inspect it, validate it, and replay it against a target you own. The runtime and the corpus are open source.