by do son ·
A tool to help you search for Directory Traversal Vulnerabilities
Platforms that I tested to validate tool efficiency:
You can download the last version cloning this repository
git clone https://github.com/jcesarstef/dotdotslash/
This tool was made to work with Python3
python3 dotdotslash.py --help
usage: dotdotslash.py [-h] --url URL --string STRING [--cookie COOKIE]
optional arguments:
-h, --help show this help message and exit
--url URL Url to attack.
--string STRING String in --url to attack. Ex: document.pdf
--cookie COOKIE Document cookie.Example
python3 dotdotslash.py \
--url "http://192.168.58.101/bWAPP/directory_traversal_1.php?page=a.txt" \
--string "a.txt" \
--cookie "PHPSESSID=089b49151627773d699c277c769d67cb; security_level=3"
Source: https://github.com/jcesarstef/
Tags: dotdotslash
Secure Your Connection
