Directory traversal

25 Points  

Photo gallery v 0.01

Author

g0uZ,  

Level  Difficulty

Validations

12720 Challengers 13%

Note  Notation

559 Votes
To reach this part of the site please login
You should validate this challenge first

Challenge Results Challenge Results

Pseudo Challenge Lang date
Phyrus   Directory traversal en 21 November 2018 at 00:30
xvzc   Directory traversal en 20 November 2018 at 23:59
losha   Directory traversal en 20 November 2018 at 21:41
Doc   Directory traversal fr 20 November 2018 at 21:39
jagstang   Directory traversal en 20 November 2018 at 21:14
tofuSoyeux   Directory traversal fr 20 November 2018 at 20:38
Brad   Directory traversal en 20 November 2018 at 19:39
Fr33d0m Noob   Directory traversal en 20 November 2018 at 18:19
ma9arona   Directory traversal en 20 November 2018 at 17:54
Slime   Directory traversal fr 20 November 2018 at 16:30

Challenges associated with this section 57 Challenges

Results Challenge's Name Validations Number of points  Explanation for the scores Difficulty  Difficulty Author Note  Notation Solution
pas_valide HTML 50% 51270 5 g0uZ 2
pas_valide HTTP - Open redirect 14% 14420 10 Swissky 10
pas_valide Command injection 14% 13673 10 sambecks 9
pas_valide Weak password 38% 39260 10 g0uZ 5
pas_valide User-agent 26% 26511 10 g0uZ 10
pas_valide Backup file 20% 19955 15 g0uZ 6
pas_valide HTTP - POST 6% 5299 15 Th1b4ud 9
pas_valide HTTP directory indexing 26% 26823 15 g0uZ 4
pas_valide HTTP Headers 17% 17566 15 Arod 8
pas_valide HTTP verb tampering 16% 16361 15 g0uZ 10
pas_valide Install files 17% 16821 15 g0uZ 2
pas_valide Improper redirect 13% 13202 15 Arod 9
pas_valide CRLF 11% 10380 20 g0uZ 6
pas_valide File upload - double extensions 12% 12276 20 g0uZ 8
pas_valide File upload - MIME type 10% 9394 20 g0uZ 7
pas_valide HTTP cookies 15% 15053 20 g0uZ 5
pas_valide Directory traversal 13% 12720 25 g0uZ 2
pas_valide File upload - null byte 9% 8820 25 g0uZ 4
pas_valide PHP assert() 5% 4567 25 Birdy42 8
pas_valide PHP filters 8% 7916 25 g0uZ 3
pas_valide PHP register globals 7% 6572 25 g0uZ 1
pas_valide File upload - ZIP 3% 2170 30 ghozt 3
pas_valide Command injection - Filter bypass 2% 1686 30 sambecks 6
pas_valide Local File Inclusion 10% 10123 30 g0uZ 3
pas_valide Local File Inclusion - Double encoding 5% 4654 30 zM 3
pas_valide PHP - Loose Comparison 2% 1657 30 ghozt 4
pas_valide PHP preg_replace() 4% 3652 30 sambecks 4
pas_valide PHP type juggling 4% 3423 30 vic511 4
pas_valide Remote File Inclusion 5% 4435 30 g0uZ 8
pas_valide Server-side Template Injection 4% 3622 30 righettod 3
pas_valide SQL injection - authentication 14% 14335 30 g0uZ 11
pas_valide SQL injection - authentication - GBK 3% 2677 30 dvor4x 3
pas_valide SQL injection - string 7% 6650 30 g0uZ 8
pas_valide XSLT - Code execution 1% 924 30 ghozt 5
pas_valide LDAP injection - authentication 5% 4149 35 g0uZ 8
pas_valide NoSQL injection - authentication 3% 2948 35 mastho 7
pas_valide Path Truncation 3% 2126 35 Geluchat 3
pas_valide PHP Serialization 3% 2861 35 Arod 2
pas_valide SQL injection - numeric 6% 5319 35 g0uZ 6
pas_valide SQL Injection - Routed 2% 1230 35 soka 5
pas_valide SQL Truncation 3% 2380 35 Geluchat 2
pas_valide XML External Entity 2% 1650 35 sambecks 1
pas_valide XPath injection - authentication 3% 3090 35 g0uZ 4
pas_valide Java - Spring Boot 1% 644 40 dvor4x 2
pas_valide Local File Inclusion - Wrappers 1% 1025 40 sambecks 2
pas_valide PHP - Eval 1% 227 40 chmod 3
pas_valide SQL injection - Error 3% 2431 40 sambecks 4
pas_valide SQL injection - Insert 1% 993 40 sambecks 2
pas_valide SQL injection - file reading 2% 1943 40 Arod 2
pas_valide XPath injection - string 2% 1666 40 g0uZ 4
pas_valide NoSQL injection - blind 1% 951 45 ghozt 3
pas_valide SQL injection - Time based 2% 1769 45 ycam 2
pas_valide Server Side Request Forgery 1% 192 50 sambecks 3
pas_valide SQL injection - blind 3% 3086 50 g0uZ 4
pas_valide LDAP injection - blind 2% 1198 55 g0uZ 1
pas_valide XPath injection - blind 1% 765 75 g0uZ 3
pas_valide SQL injection - filter bypass 1% 703 80 sambecks 5