Path Traversal - Revision history

Andrew Smith at 19:53, 6 October 2015

2015-10-06T19:53:39Z

Andrew Smith at 19:53, 6 October 2015

2015-10-06T19:53:02Z

Andrew Smith at 19:20, 6 October 2015

2015-10-06T19:20:36Z

Andrew Smith at 19:19, 6 October 2015

2015-10-06T19:19:01Z

Andrew Smith at 18:43, 6 October 2015

2015-10-06T18:43:06Z

Andrew Smith at 18:42, 6 October 2015

2015-10-06T18:42:27Z

MediaWiki spam cleanup: Reverting to last version not containing links to www.textc4tzellaror.com

2009-05-27T18:29:30Z

Reverting to last version not containing links to www.textc4tzellaror.com

MediaWiki spam cleanup: Reverting to last version not containing links to s1.shard.jp

2009-05-27T15:59:59Z

Reverting to last version not containing links to s1.shard.jp

Deleted user at 12:05, 26 May 2009

2009-05-26T12:05:23Z

Deleted user at 16:32, 22 May 2009

2009-05-22T16:32:00Z

← Older revision		Revision as of 19:53, 6 October 2015
Line 169:		Line 169:
	[[Category:Path Traversal Attack]]		[[Category:Path Traversal Attack]]
	[[Category:Resource Manipulation]]		[[Category:Resource Manipulation]]
		+	[[Category:Attack]]

← Older revision		Revision as of 19:53, 6 October 2015
Line 169:		Line 169:
	[[Category:Path Traversal Attack]]		[[Category:Path Traversal Attack]]
	[[Category:Resource Manipulation]]		[[Category:Resource Manipulation]]
−	~~[[Category:Attack]]~~

@@ Line 9: / Line 9: @@
 ==Overview==
-A path traversal attack (also known as directory traversal) aims to access files and directories that are stored outside the web root folder. By manipulating variables that reference files with “dot-dot-slash (../)” sequences and its variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on file system, including application source code, configuration and critical system files, limited by system operational access control.
+A path traversal attack (also known as directory traversal) aims to access files and directories that are stored outside the web root folder. By manipulating variables that reference files with “dot-dot-slash (../)” sequences and its variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on file system including application source code or configuration and critical system files. It should be noted that access to files is limited by system operational access control (such as in the case of locked or in-use files on the Microsoft Windows operating system).
 This attack is also known as “dot-dot-slash”, “directory traversal”, “directory climbing” and “backtracking”.

@@ Line 9: / Line 9: @@
 ==Overview==
-A Path Traversal attack aims to access files and directories that are stored outside the web root folder. By browsing the application, the attacker looks for absolute links to files stored on the web server. By manipulating variables that reference files with “dot-dot-slash (../)” sequences and its variations, it may be possible to access arbitrary files and directories stored on file system, including application source code, configuration and critical system files, limited by system operational access control.
+A path traversal attack (also known as directory traversal) aims to access files and directories that are stored outside the web root folder. By manipulating variables that reference files with “dot-dot-slash (../)” sequences and its variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on file system, including application source code, configuration and critical system files, limited by system operational access control.
 This attack is also known as “dot-dot-slash”, “directory traversal”, “directory climbing” and “backtracking”.
@@ Line 59: / Line 56: @@
 In many operating systems, null bytes %00 can be injected to terminate the filename. For example, sending a parameter like:
   ?file=secret.doc%00.pdf
 will result in the Java application seeing a string that ends with ".pdf" and the operating system will see a file that ends in ".doc". Attackers may use this trick to bypass validation routines.

← Older revision		Revision as of 18:43, 6 October 2015
Line 170:		Line 170:
	[[Category:Path Traversal Attack]]		[[Category:Path Traversal Attack]]
	[[Category:Resource Manipulation]]		[[Category:Resource Manipulation]]
		+	[[Category:Attack]]

← Older revision		Revision as of 18:42, 6 October 2015
Line 170:		Line 170:
	[[Category:Path Traversal Attack]]		[[Category:Path Traversal Attack]]
	[[Category:Resource Manipulation]]		[[Category:Resource Manipulation]]
−	~~[[Category:Attack]]~~

@@ Line 1: / Line 1: @@
 {{Template:Attack}}
@@ Line 10: / Line 9: @@
 ==Overview==
-A Path Traversal attack aims to access files and directories that are stored outside the web root folder. By browsing the application, the attacker looks for absolute links to files stored on the web server. By manipulating variables that reference files with âdot-dot-slash (../)â sequences and its variations, it may be possible to access arbitrary files and directories stored on file system, including application source code, configuration and critical system files, limited by system operational access control.
+A Path Traversal attack aims to access files and directories that are stored outside the web root folder. By browsing the application, the attacker looks for absolute links to files stored on the web server. By manipulating variables that reference files with “dot-dot-slash (../)” sequences and its variations, it may be possible to access arbitrary files and directories stored on file system, including application source code, configuration and critical system files, limited by system operational access control.
-The attacker uses  â../â sequences to move up to root directory, thus permitting navigation through the file system.
+The attacker uses  “../” sequences to move up to root directory, thus permitting navigation through the file system.
-This attack can be executed with an external malicious code injected on the path, like the [[Resource Injection]] attack. To perform this attack itâs not necessary to use a specific tool; attackers typically use a spider/crawler to detect all URLs available.
+This attack can be executed with an external malicious code injected on the path, like the [[Resource Injection]] attack. To perform this attack it’s not necessary to use a specific tool; attackers typically use a spider/crawler to detect all URLs available.
-This attack is also known as âdot-dot-slashâ, âdirectory traversalâ, âdirectory climbingâ and âbacktrackingâ.
+This attack is also known as “dot-dot-slash”, “directory traversal”, “directory climbing” and “backtracking”.
 ==Related Security Activities==
@@ Line 51: / Line 50: @@
 UNIX
-  Root directory:  â / â
+  Root directory:  “ / “
-  Directory separator: â / â
+  Directory separator: “ / “
 WINDOWS
-  Root directory: â  <partition letter> : \ â
+  Root directory: “  <partition letter> : \ “
-  Directory separator: â / â or â \ â
+  Directory separator: “ / “ or “ \ ”
   Note that windows allows filenames to be followed by extra . \ / characters.
@@ Line 71: / Line 70: @@
   <nowiki> http://some_site.com.br/some-page.asp?page=index.html  </nowiki>
-In these examples itâs possible to insert a malicious string as the variable parameter to access files located outside the web publish directory.
+In these examples it’s possible to insert a malicious string as the variable parameter to access files located outside the web publish directory.
    <nowiki> http://some_site.com.br/get-files?file=../../../../some dir/some file </nowiki>