The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

N OT E

The observant may have noticed the appearance of a redundant 

./

in

the name of our uploaded file. This was necessary to ensure that our truncated

URL ended on a 3-byte boundary of clear text, and therefore on a 4-byte

boundary of encoded text, in line with the Base64-encoding scheme. Truncating

an encoded URL partway through an encoded block would almost certainly

cause an error when decoded on the server.

Chapter 10 

■

Exploiting Path Traversal

343

70779c10.qxd:WileyRed  9/14/07  3:14 PM  Page 343

---

Exploiting Traversal Vulnerabilities

Having identified a path traversal vulnerability that provides read or write

access to arbitrary files on the server’s file system, what kind of attacks can

you carry out by exploiting these? In most cases, you will find that you have

the same level of read/write access to the file system as the web server process

does. 

HACK STEPS

■