Directory traversal

Wednesday 2nd August 2023 (updated: Monday 1st January 2024)

PHP

Research

Development

Cyber Security

Sometimes refered to as file path traversal. I have become fascinated with the techniques attackers may use to discover web server directories and files. Specifically, of course, those directories and files that are not intended to be obvious. A simple look at robots.txt in the root directory may unearth some resources that aren't meant to be viewed. By virtue of the fact they are listed in the .txt file the website owners don't want search engines indexing them. This is all above board and I'...[more]