domains / families / security / performing-directory-traversal-testing

performing-directory-traversal-testing

separate

Test web applications for path traversal and Local/Remote File Inclusion

When to use

• During authorized penetration tests when the application handles file paths in URL parameters or request bodies
• When testing file download, file view, or file include functionality
• For assessing Local File Inclusion (LFI) and Remote File Inclusion (RFI) vulnerabilities
• When evaluating template engines, logging systems, or report generators that reference files
• During security assessments of APIs that accept file names or paths as parameters

Skill page

Source