The path-injection tag has no wiki summary.
2
votes
3answers
91 views
sql injection, exec and preg_replace filter
Ive been informed this is not safe to use in regards to sql injection:
preg_replace("/[\"'%()@$.!&?_: #\/-]/","", mysql_real_escape_string($_GET['var']));
what would be the difference in the ...
2
votes
1answer
290 views
What attacks use enabled Apache's PATH_INFO?
In Tangled Web Michal Zalewski says:
If you are not using path-based parameter passing (such as PATH_INFO), consider disabling this feature.
He gave only one example of this vulnerability. There ...
1
vote
1answer
93 views
Where to find a fake hierarchy for a honeypot for double-dot/path traversal attacks?
I would like to provide content when a hacker tries something like GET /../../../etc/passwd, but they may choose something else, other than passwd. I will install notification of when somebody does ...
5
votes
2answers
618 views
How do you exploit Directory Traversal to traverse from one drive/share to another?
I'm trying to figure out if it is possible to traverse across drives or shares. If I have a path that is concatenated in a web application, where the prefix is a drive, such as this:
var path = ...
