BSCP

Practice session

In a path traversal attack, an attacker injects `../../../../etc/passwd` into a filename parameter. The application prepends `/var/www/uploads/` to the input. How does the sequence `../` achieve directory traversal?

Loading your practice session…