Sign In
- Platform
- Solutions
- Modern NDR
- Resources
- Company
Platform
Modern NDR
Resources
Platform
Modern NDR
Resources
DETECTION OVERVIEW
Risk Factors
Path traversal attempts are relatively easy to perform with attack tools. Most operating systems block unauthorized access to valuable files. However, when a path traversal attempt is paired with other vulnerabilities, an attacker might be able to run arbitrary code, steal credentials, or steal sensitive information.
Kill Chain
Risk Score
87
Path traversal is a technique that exploits web application vulnerabilities, enabling attackers to access restricted files or directories outside of a web root folder. First, the attacker constructs a URI that includes a file name and a sequence of characters in the file path, such as .. or ../ (..%2F when encoded in HTML). These character sequences instruct the server to retrieve the file from a parent directory. Next, the attacker submits the modified URI within an HTTP request to the web application. If there is insufficient input validation or access controls, the application traverses up the directory to retrieve the file and deliver it to the attacker.
