Vulnerability field guide
Path Traversal
Path traversal lets an attacker climb out of an intended directory with dot-dot-slash sequences and read arbitrary files on the server. Here is how it works, the encodings that defeat naive filters, and the canonicalization fix that stops it.
3 articles14 min totalOverview to advanced techniques
Start here
../../../etc/passwdStep 01 · Start with the overview
Path Traversal3 min read
Path Traversal: How ../ Reads Files You Never Meant to Share
Path traversal lets an attacker climb out of an intended directory with dot-dot-slash sequences and read arbitrary files on the server. Here is how it works, the encodings that defeat naive filters, and the canonicalization fix that stops it.
Read the overviewContinue the field guide
2 focused deep-dives