Post

The attack: send application/json to a Form Trigger endpoint instead of multipart/form-data. The handler writes the attacker-controlled files object directly into the request body. Point filepath at /etc/passwd. The workflow execution data returns the contents base64-encoded.

What makes this demo different from most AI showcases: it shows the failures. The wrong API endpoints. Reading the n8n source code inside the Docker container to figure out why. Multiple iterations before the exploit works. The AI handles the tedious parts so you can focus on the important parts.