PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Beyond ‘../../’ - a practical guide to path traversal and arbitrary file read attacks

yeswehack.com | blog | #bug-bounty | #arbitrary-file-read | #web-security | #path-traversal | #exploitation | #ssrf
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Practical guide to path traversal and arbitrary file read attacks: path resolution quirks, encoding bypasses, exploitation in modern APIs, SSRF-chained traversal and high-value target files.
Published
Collected

Related coverage

vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
research · lab.ctbb.show
Write Path Traversal to a RCE Art Department
# Write Path Traversal to a RCE Art Department ~/authors/fsi - profile fsi * * * Diyan Apostolov Nov 28, 2025 CriticalThinking Research members are treated as artists thus here is my small and...
vulnerability · slcyber.io
Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)
Post-auth SSRF in VMware Workspace ONE Access (CVE-2021-22056) chained to steal admin JWTs and achieve RCE.
vulnerability · slcyber.io
Turning bad SSRF to good SSRF: Websphere Portal (CVE-2021-27748)
Turning redirect-only SSRF into full-read SSRF in Websphere Portal (CVE-2021-27748) via open redirect chaining.
Back