Web applications attacks/Directory traversal

Example

• WebGoat, Bypass a path based Access Control lesson shows how to read non-authorized content by simply locally changing the value of the file.

Tools

• Dotdotpwn