2015-09-11 19:39:11 -04:00
|
|
|
Notes:
|
|
|
|
|
2015-09-15 22:45:46 -04:00
|
|
|
** source-disc-cmd-exec-traversal.txt **
|
2015-09-11 19:39:11 -04:00
|
|
|
single directory traversals that have caused showcode or command exec issues in the past
|
2015-09-15 22:45:46 -04:00
|
|
|
``` GET /path/*payload*relative/path/to/target/file/ ```
|
2015-09-11 19:39:11 -04:00
|
|
|
|
2015-09-15 22:45:46 -04:00
|
|
|
** source-disclosure-generic.txt **
|
2015-09-11 19:39:11 -04:00
|
|
|
known cross platform source Code, file disclosure attack patterns - append after file or dir path
|
|
|
|
|
2015-09-15 22:45:46 -04:00
|
|
|
** source-disclosure-microsoft.txt **
|
2015-09-11 19:39:11 -04:00
|
|
|
microsoft-specific - appends after filename - try the generic list for microsoft, too
|
|
|
|
|
|
|
|
|