312-49 · Question #15
Attackers can manipulate variables that reference files with "dot-dot-slash (./)" sequences and their variations such as Identify the attack referred.
The correct answer is A. Directory traversal. This describes a Directory Traversal attack (also called Path Traversal). Attackers insert sequences like '../' (dot-dot-slash) into file path parameters to navigate outside the intended web root directory and access restricted files (e.g., /etc/passwd on Linux). Variations…
Question
Attackers can manipulate variables that reference files with "dot-dot-slash (./)" sequences and their variations such as Identify the attack referred.
Options
- ADirectory traversal
- BSQL Injection
- CXSS attack
- DFile injection
How the community answered
(29 responses)- A90% (26)
- B7% (2)
- D3% (1)
Explanation
This describes a Directory Traversal attack (also called Path Traversal). Attackers insert sequences like '../' (dot-dot-slash) into file path parameters to navigate outside the intended web root directory and access restricted files (e.g., /etc/passwd on Linux). Variations include URL-encoded forms like %2e%2e%2f. SQL Injection targets database queries, XSS injects client-side scripts, and File Injection refers to uploading malicious files - none of these involve path manipulation using dot-dot-slash sequences.
Topics
Community Discussion
No community discussion yet for this question.