Directory Transversal


Hello everyone, I'm in the middle of a test on a app that the following command works on
http://mycomputer:port#/..//..//..//..//..//..//..//windows/win.ini
and it will prompt me to save the file, if i check my packet capture I see the contents of the file.

So far I've been unable to get a put or post command to work and was hoping to get some ideas from you all on things to try.

I've been trying to get nc/telnet and some other tools to help me with the put comand

Thanks in advance --John

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

Relevant Pages

  • Re: Programming "efficiently" on given hardware - what does it mean really?
    ... >> in a command line world again. ... > launching an app, selecting menu items, hoping it does what ... In a GUI environment, use a RAD tool to whip up a quick, simple UI ...
    (comp.programming)
  • Re: Application starts too soon
    ... expecting a network connection to exist. ... > The application runs froma a batch file. ... Finally the command prompt arrives, ... > think the app tries to run, encounters an error, and exits. ...
    (microsoft.public.windowsxp.embedded)
  • Re: Application starts too soon
    ... Windows XPE site and looked thru the two XPE books and found nothing on this ... >> The application runs froma a batch file. ... >> The batch file has my exe followed by a Shutdown command ... >> think the app tries to run, encounters an error, and exits. ...
    (microsoft.public.windowsxp.embedded)
  • Re: Updating a database
    ... command line parameters and exits. ... Update.exe waits for the main App to exit ... whilst the backend is an Access database. ... > I do changes to the app and the database (add fields, change queries, ...
    (microsoft.public.vb.general.discussion)
  • Re: send command
    ... xhost table in order to use the tcl "send" command. ... your display to any app you have rights to start. ... machines you need to run X apps on. ...
    (comp.lang.tcl)