Torgeek
- What is directory traversal?
- What is directory traversal example?
- What is directory traversal attack?
- What causes directory traversal attack?
What is directory traversal?
What is directory traversal? Directory traversal is a type of HTTP exploit in which a hacker uses the software on a web server to access data in a directory other than the server's root directory. If the attempt is successful, the threat actor can view restricted files or execute commands on the server.
What is directory traversal example?
The simplest example of a directory traversal attack is when an application displays or allows the user to download a file via a URL parameter.
What is directory traversal attack?
Directory traversal (also known as file path traversal) is a web security vulnerability that allows an attacker to read arbitrary files on the server that is running an application. This might include application code and data, credentials for back-end systems, and sensitive operating system files.
What causes directory traversal attack?
A directory traversal vulnerability is the result of insufficient filtering/validation of browser input from users. Directory traversal vulnerabilities can be located in web server software/files or in application code that is executed on the server.
