Mirrors/CTF-Writeups
2
0
Fork 0
mirror of https://github.com/AbdullahRizwan101/CTF-Writeups synced 2024-11-24 21:03:07 +00:00
Code Issues Projects Releases Packages Wiki Activity

Create Lab3.md

Browse source
This commit is contained in:
ARZ 2021-10-29 16:38:01 +05:00 committed by GitHub
parent b1cf0856b0
commit 3787b6cc8f
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 17 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
Portswigger/Directory Traversal/Lab3.md Normal file
View file

@ -0,0 +1,17 @@
# Portswigger Directory Traversal Lab-3
## File path traversal, traversal sequences stripped non-recursively
In this lab we have to read `/etc/passwd` file through LFI (Local File Inclusion) or Directory Traversal through the vulnerable GET parameter `image` on the web page but this time the web application will be filtering those `../` to prevent us going out of the current directory from where it's loading those images
<img src="https://i.imgur.com/3rxFLOC.png"/>
We have the same web page as we saw from the other 2 labs
<img src="https://i.imgur.com/KBOU7W1.png"/>
On trying those `../` it doesn't give us the `passwd` file so to get around this filter is to use `..././` instead of `../` and the way it's going to work is that the filter will check for `../` and it's going to remove it from the string so all that is left will be . , . / which will be treated as `../`
<img src="https://i.imgur.com/aiRi28l.png"/>
<img src="https://i.imgur.com/vNf1PG7.png"/>