Directory Traversal - Lab #5 File path traversal, validation of start of path | Long Version

In this video, we cover Lab #5 in the Directory Traversal Vulnerabilities module of the Web Security Academy. This lab contains a file path traversal vulnerability in the display of product images. The application transmits the full file path via a request parameter, and validates that the supplied path starts with the expected folder. To solve the lab, we retrieve the contents of the /etc/passwd file.

▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Buy my course: https://academy.ranakhalil.com/p/web-security-academy-video-series

▬ 📚 Contents of this video 📚 ▬▬▬▬▬▬▬▬▬▬
00:00​​​ - Introduction
00:13 - Web Security Academy Course (https://bit.ly/30LWAtE)
01:24 - Navigation to the exercise
01:59 - Understand the exercise and make notes about what is required to solve it
02:30 - Exploit the lab
04:56 - Script the exploit in Python
11:26 - Summary
11:38 - Thank You

▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬
Notes.txt document: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/directory-traversal/lab-05/notes.txt
Python script: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/directory-traversal/lab-05/directory-traversal-lab-05.py
Web Security Academy Exercise Link: https://portswigger.net/web-security/file-path-traversal/lab-validate-start-of-path
Rana's Twitter account: https://twitter.com/rana__khalil

Видео Directory Traversal - Lab #5 File path traversal, validation of start of path | Long Version канала Rana Khalil