Collaborate Disseminate
If a web app is giving normal "not found" page for /blablablaalsdf but for certain paths, it doesn’t give the normal 404 page but gives Cannot Get /<path> instead, would this be an indicator that this path (and whatever un… Continue reading Can we identify secondary contexts from web application error messages? [closed]
In the EasyPHP Webserver 14.1 software, there is an Absolute Path Traversal vulnerability in the dashboard index.php page.
https://www.exploit-db.com/exploits/51430
I reviewed the source code and tried to look for the vulnerable code but I… Continue reading How to prevent absolute path traversal in EasyPHP Webserver 14.1
I have a website with a URL of lets say "123.example.com" where I am hosting a large ERP system. Does hosting the application at "123.example.com/myapp" provide any layer of security from malicious web crawlers/bots etc… Continue reading Subdomain vs Virtual Path discovery by bots
I have found an arbitrary file upload vulnerability on a flask application that I was playing with that essentially allows me to append to any file (and create new ones) in the file system. The code that causes the vulnerability boils down… Continue reading Arbitrary File Upload Vulnerability
On my target site, I found two vulnerabilities, unrestricted file upload(to any directory) and directory traversal. I have two end points :
1- site.com/fileUp : uploads file
{
—-Request Parameters—
file_data=<file>
file_name=123…. Continue reading Uploading webshell in ASP.net application using directory-traversal and file-upload vulnerability
I ran a SAST Analysis on a project I’m working on and the tool reports the following snippet as a Relative Path Traversal vulnerability (CWE-23):
[Authorize]
[HttpPut("exists")]
public async Task<IActionResult> FileExists([… Continue reading Checking if an arbitrary file exists on the server can be considered Path Traversal?
I am currently testing directory traversal against an iot device.
If I go to the HTTP like this:
http://[ip]/cgi-bin/javascript?type=css&filename=%%32%65%%32%65%%32%66%%32%65%%36%38%%37%34%%36%31%%36%33%%36%33%%36%35%%37%33%%37%33
Whe… Continue reading Help needed on directory traversal on my iot decvice [closed]
I have discovered a ZipSlip vulnerability in a web application. Simply put, ZipSlip is basically a directory traversal through a specially crafted zip file, which is made to contain "../" inside, in order to extract to an arbitra… Continue reading ZipSlip directory traversal cannot reach root directory
I’m trying to check if it’s possible to bypass a two dots verification to perform a Path Traversal, downloading files out of the allowed folder. The problem is that it uses rawurldecode when validating the submitted file, so URL Encoding t… Continue reading Path Traversal with rawurldecode and dots validation
I am faced with a file upload functionality. We can upload docs and png’s but cannot view them.
I have tested for several things so far and now would like to test for directory traversal via file name.
I.e if can I upload / replace files i… Continue reading Confirming File upload directory traversal without knowing upload path or being able to retrieve the uploaded file?