Directory Traversal or file path traversal is a web security vulnerability in which an attacker tries to gain the access to unauthorized or restricted files and directories. This might include : Application code and data. Credentials for back-end systems. Sensitive operating files. How to read files via directory traversal? For…

In this post, we will look at the Injection attack which XPath injection. First, we must know what is XPath injection attack? XPath injection attack is like the SQL injection attack in which the website uses user-given information to generate an XPath that will query from XML data. If the website is vulnerable to XPath injection, then we can…

Ever wondered where is the information of user is saved when we create a user in Linux. Today we will take a look at 4 files which contains user information when a user is created. All this files are located in etc folder. 1. /etc/passwd As the name suggest it…