Feb. 18, 2024, 8:32 a.m. | dollarboysushil

InfoSec Write-ups - Medium infosecwriteups.com

Portswigger — Path Traversal All Labs Walkthrough(Bug Bounty Prep)[by dollarboysushil]

Link to portswigger academy: https://portswigger.net/web-security/file-path-traversal

For any correction / query /suggestion contact on
Instagram dollarboysushil
Twitter (X) dollarboysushil
Youtube dollarboysushil
Linkedin dollarboysushil

What is path traversal?

Path traversal or directory traversal is a vulnerability which allows an attacker to read arbitrary files on the server which they should not have access.

Reading arbitrary files via path traversal

Lets look at an example to understand how path traversal attack occurs

https://insecure-website.com/loadImage?filename=64.png …

bug bounty ethical hacking path traversal portswigger web security

Financial Crimes Compliance - Senior - Consulting - Location Open

@ EY | New York City, US, 10001-8604

Software Engineer - Cloud Security

@ Neo4j | Malmö

Security Consultant

@ LRQA | Singapore, Singapore, SG, 119963

Identity Governance Consultant

@ Allianz | Sydney, NSW, AU, 2000

Educator, Cybersecurity

@ Brain Station | Toronto

Principal Security Engineer

@ Hippocratic AI | Palo Alto