Research Academy Daily Swig
My account Customers About Blog Careers Legal Contact
  1. Web Security Academy
  2. Directory traversal
  3. Lab

Lab: File path traversal, simple case

APPRENTICE

This lab contains a file path traversal vulnerability in the display of product images.

To solve the lab, retrieve the contents of the /etc/passwd file.

Access the lab

All topics

SQL injection XSS CSRF Clickjacking DOM-based CORS XXE SSRF Request smuggling Command injection Server-side template injection Insecure deserialization Directory traversal Access control Authentication Business logic vulnerabilities Web cache poisoning HTTP Host header attacks WebSockets Information disclosure
Try Burp Suite for Free

Find directory traversal vulnerabilities using Burp Suite

Try for free