Web Penetration Testing #17 - File Path Traversal Lab on Burp Suite Community Edition.
00:00 || 00:30 Introduction🚀
00:30 || 01:40 Web Developer Tools Network Requests.
01:40 || 04:00 Modify GET Request in Burp Suite.
04:00 || 04:40 Get curl command from Burp Suite.
04:40 || 04:54 Outro.
🚀 Welcome to our YouTube video! Today, we're delving into the critical concept of Unrestricted File Access Vulnerabilities, a topic that's essential for anyone concerned about cybersecurity.
*Basic Outline:*
🔍 Let's break down the key points we'll be covering in this video:
*Path traversal:* ✔️
*Access control:* ❓
*Authentication:* ❓
*SSRF (Server-side request forgery):* ❓
*File upload vulnerabilities:* ❓
*OS command injection:* ❓
*SQL injection:* ❓
*Unrestricted File Access Vulnerability:*
This vulnerability, often referred to as directory traversal, enables attackers to access unauthorized files and information on a server. They can obtain:
*Sensitive application data:* Code, configuration files, and other internal resources.
*Credentials:* Information used to access other systems or databases.
*Confidential information:* Personal data, financial records, or other sensitive content.
In extreme cases, attackers might even be able to *modify files* on the server, potentially leading to complete system compromise.
*Lab Demonstration:*
We'll showcase a practical demonstration of File Path Traversal in a lab environment. Stay tuned to see how attackers exploit this vulnerability and learn how to prevent it.
*Lab Walkthrough:*
1. *Intercepting Requests:* Go to the lab link and in the proxy tab, select intercept, and open the browser. Add the lab link in a new browser tab.
2. *Modifying URLs:* Go to HTTP History from the Proxy tab and find a request for an image with the filename property. For example, Request URL: https://0a04006b03d44047816fa7d000500....
3. *Analyzing Responses:* Now, change the image URL to `passwd`. If we try to access the URL directly, it will give us a "no file found" error. However, if we modify the request inside the Burp Suite repeater, the response would be different. Check out the response at https://0a04006b03d44047816fa7d000500....
*References:*
Free Course: [Server Side Vulnerabilities](https://portswigger.net/web-security/....