Academy
Apprentice track

Path Traversal

Dot-dot-slash past the intended directory, and the allowlists that stop it.

Create a free account to track progress and earn the certificate. You can read the syllabus below without one.

Final exam

3 questions in 10 minutes, 3 to pass. Certificates require it.

Take the exam
  1. 01How path traversal worksConcatenated paths obey ../ the same as your shell does.
  2. 02Lab: out of the pages directoryA page viewer trusts ?page=. Read the system's users instead.
  3. 03Path traversal quizThree questions on climbing, encodings, and the real fix.