File Upload Security Scanner

How this scan works

• Accepts an explicit upload endpoint URL — this can't be discovered safely by crawling alone
• When supplied: checks accepted MIME/extension allow-list strictness
• Checks the response for a publicly-reachable upload URL
• Checks for executable extension rejection (.php, .jsp, .exe) using an inert-content test file
• Without a target endpoint, the scan returns requires_setup