File path traversal, traversal sequences blocked with absolute path bypass

Like in the previous lab, we don’t have to add ../../../ because we can just add /etc/passwd as the caption is saying absolute path bypass.

Likewise i told you in the previous lab, open up the foxy proxy and go to the sitemap and you will see something like this and go into the filter section on the top left and add images and you will see the image filename something like filename=66.jpg. There are many files, you can choose any file. And send this request to the repeater .

This is the response that we send to the repeater.

In this lab we dont need to add ../../../ as it says it is vulnerable to absolute lab. So, just add /etc/passwd. And, send this request to see what is the response.

So, you can see that this is the result and as i said it is vulnerable to absolute path. We dont need to add anything.

And your lab is solved. Congragulations…………………