Directory traversal
Directory traversal is an HTTP adventure program through which hackers get unauthorized system access and read restricted files and directories.
The applications usually follow either of the root directory access or access control lists (ACLs) methods, and give restricted access to the application files and directories for any user. Directory traversal occurs by letting the user input be submitted to the program without thoroughly validating it.
Applications should engage user input validation, restrict special characters, and avoid characters that are commonly used by hackers to access application directories. It is also advisable to update the applications and servers with the latest software, patches, and framework ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access