PortSwigger - Directory Traversal - Lab 1

Lab 1 - Directory Traversal - Simple Case

Lab Objective:

This lab contains a path traversal vulnerability in the display of product images.

To solve the lab, retrieve the contents of the /etc/passwd file.

Reference:
Port Swigger - Lab 1
Rana Khalil - Lab 1

Solution

---

1. Investigate http requests and notice the /image?filename request

2. We’ll send the request to intruder and remove the image.jpg and replace it with the below payload to read the etc/passwd file.

../../../../../../../../etc/passwd

---