PortSwigger - Directory Traversal - Lab 3

Lab 3 - Directory Traversal - File path traversal, traversal sequences stripped non-recursively

Lab Objective:

This lab contains a path traversal vulnerability in the display of product images. The application strips path traversal sequences from the user-supplied filename before using it.

To solve the lab, retrieve the contents of the /etc/passwd file.

Reference:
Port Swigger - Lab 3
Rana Khalil - Lab 3

Solution

---

1. Try the payload

../../../../etc

2. We’ll test to see if the filter removes the file path recursively.

..././..././..././..././etc/passwd

---