From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Unlock this course with a free trial

Join today to access over 24,200 courses taught by industry experts.

Directory traversals

Directory traversals

From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Start my 1-month free trial Buy for my team

Directory traversals

“

- In this lesson, we're going to discuss directory traversal attacks and the vulnerabilities associated with them. Now, a directory traversal attack is technically a type of injection attack, and it's used to gain access to files, directories, or commands that may or may not be connected to the web document root directory. If you're running a web server, it's going to be running on top of some kind of operating system like Windows or Linux, and in the storage volume for that server, there's going to be a folder that's called the web document root directory, and it contains all the files that are going to contain your website. For example, if you go over to diontraining.com, it has to access our HTML, PHP, and image files in our web document root directory to be able to display that website to you. This web document root directory is not the same as the root directory on your hard drive, though. This web document root directory is actually a subdirectory someplace underneath the root…

Contents