Path Traversal

• Path traversal is also known as directory traversal. These vulnerabilities enable an attacker to read arbitrary files on the server that is running an application.
• Application code and data
• Credentials for the backend system
• Sensitive operating system files.
• In some cases, an attacker might be able to write arbitrary files on the server, allowing them to modify application data or behaviour, and ultimately take full control of the server.

`- <https://insecure-website.com/loadImage?filename=../../../etc/passwd>`

1. Access the lab on PortSwigger Lab.

2. Intercept the request with Filename.

3. Capture the request and send it to the repeater.

4. Use the payload with — ../../../etc/passwd

5. Lab Solved.