Directory Traversal / File Read / Content Length [HackTheBox OpenSource]
Quick video to show an issue I ran into using `curl` to exploit a directory traversal / file read vulnerabilty, and how to avoid it. Uses the OpenSource box from HackTheBox as an example.
Full OpenSource Writeup: https://0xdf.gitlab.io/2022/10/08/htb...
☕ Buy Me A Coffee: https://www.buymeacoffee.com/0xdf
[00:00] Introduction
[00:25] Showing File Read and Directory Traversal
[01:45] Showing issue where file fails to return
[02:27] Troubleshooting in Wireshark
[04:00] Solution - using `--ignore-content-length` option