Advanced Directory Traversal Techniques!

👩‍🎓👨‍🎓 Learn about Directory Traversal vulnerabilities. In this video, we are going to look at advanced strategies to test for directory traversal issues.

Overview:
00:00 Intro
00:12 Lab overview
00:53 Double Encoding
02:50 Base Folder Needed
04:37 Null Byte Injection
05:50 Conclusion

🔗 Portswigger Directory Traversal Challenges:

---

[viniciusrodrigues]

Your voice is so calming, thanks for the amazing explanation!

[AnthonyMcqueen]

Great stuff going to use in my manual approach to hunt for this bug.

[jwd]

Cam we apply these all path travasal techniques in different cases?Like anyother parameter who is retriving data from server?And second thing is that most of the modern applications are not using parameter like that "filename=picture.jpg" they use it like "/folder/3/2/picture.jpg" then can we apply techniques on this path aslo?

[pachinchannel]

Have this scenary: an html javascript site where I can sing in and log in, can upload any file I want. But the site generate random uuid for the file when upload. So there is no location that I can see for the files.. so how I can find it? try many forms of traversal attacks but it just don't works.. maybe someone can send me some lights for my scenary.

[alla-turca]

why did we need to url encode it twice? how are we going to know in a real world example that if we need to url encode it twice or not? are we going to try all the possiblities by hand? before this i had nothing in my mind as double encoding. i wonder how could i figure this out myself

[fusman]

Explain Subdomain enumerations methods!

[bimalk]

What is the priority of directory traversal ?

[itsmdud]

when i double encoded / i got this -%25%32%66 but when you did it 2:19 you got %252f how?