Directory Traversal Attack

Question 1

What is Directory Traversal?

Answer 1

type of injection attack and any kind of injection attack really focuses on the ability for the attacker to insert malicious code through an application interface.

Question 2

What type of slashes do Unix Systems use?

Answer 2

../

Question 3

What type of slashes do Windows Systems use?

Answer 3

..\ and accepts ../

Question 4

What is File Inclusion?

Answer 4

Allows an attacker to either download files from an arbitrary location or upload an executable or script file to open a backdoor?

Question 5

What is a Remote File Inclusion?

Answer 5

occurs when an attacker tries to execute a script to inject a remote file into the web app or the website.

Question 6

What is Local File Inclusiom?

Answer 6

Occurs when an attacker tries to add a file that already exists

Question 7

For the exam, Anytime you see something with ../, I want you to think of what?

Answer 7

Directory Traversal