Path traversal

Challenges

• File path traversal, simple case
• File path traversal, absolute path bypass
• File path traversal, sequences stripped non-recursively
• File path traversal, superfluous URL-decode
• File path traversal, validate start of path
• File path traversal, validate file extension with null byte bypass

Resources

• What is path traversal, and how to prevent it? | Web Security Academy
• Path Traversal | OWASP Foundation
• PayloadsAllTheThings- Client Side Path Traversal