I am just testing some web application. In this web application, I can upload some file at least as zip archive. I came to an idea to test, if I could place a file at a specific location I want. My first idea is to put some sort of hard coded paths in a zip archive. Now, with this I have several questions:
- Is this also true in zip archives: Can I put some hard coded paths within a zip archive?
- If 1. is true, which tool would be good for that? Are there any specific tools for that?
- Is there an official name for that sort of vulnerability?