Tag Info

New answers tagged


There are some security modules for popular web apps that attempt to improve security with large sets of Apache mod_rewrite rules. I can imagine some conditionals in those that skip over matches for e.g. /about$ when they should be more thorough in their checks. If that's the case here, the URL will get through those checks and allow the path traversal or ...


I think that this bot was looking for Path traversal attacks. See this link for more info. It could have been doing that to test for access or to try and fingerprint the web server / web framework in use. Some web frameworks, for example, have specific directories. Once identified, it could either report back or run a more targeted attack. Path ...

Top 50 recent answers are included