InRadio HackersbySamadhan shimple·Oct 21Path Traversal Explained: How One File Parameter Exposes Your Server’s SecretsA practical guide to understanding, testing, and fixing path traversal vulnerabilities
InCodeToDeploybyRaj Namdev·Oct 21A Practical Guide to Hunting Bugs in GraphQL When Introspection Is OffThe schema tells you what exists. The resolvers decide who may run it.
Khushbu·Oct 10CTF Writeup — Forbidden Paths | CyLab Security Academy (Web Exploitation, Medium)The filter was blocking absolute paths — anything that looked like it was trying to escape straight to root. It never once checked where a…
AstroKrypTech·Oct 9From CSPT to DOM XSS: Chaining an Open Redirect with Malicious JSONBonus: A webhook.site alternative for security testingA response icon1A response icon1
Affanhaxor·Oct 9Forbidden Paths — picoCTF Write-up | Understanding Path Traversal in Web ApplicationsIntroduction
2anomaly·Oct 4Path Traversal Vulnerability: My pwn.college Walkthrough (Lab 1 & Lab 2)Two Flask labs , two different "fixes" that didn't work - How I found and exploited the directory traversal bugs step by step .
InSystem Weaknessbyexz·Sep 27Security Findings: Arbitrary File Read via Path Traversal in an Express AppPath Traversal #1
InSystem WeaknessbyNitish Mukhiya·Sep 13File Path Traversal: Complete Hands-On Guide from PortSwigger Labs to Real-World TestingNote on notation: Throughout this article, traversal sequences are written in “defanged” form — e.g. ../ instead of the literal…
İsmail Yerlikaya·Aug 31Zip Slip: The Silent Threat Inside an Ordinary Archive FilePicture a web application where users can upload a .zip file and have its contents extracted on the server. CV upload systems, theme/plugin…
