webeasy

Fraga fisken

undutmaning

Task: Deno file server with flawed sanitize() function using regex ^.. anchor. Solution: Bypass path traversal filter by prefixing with x/.. since regex only checks string start.

$ ls tags/ techniques/
path_traversalregex_bypassdenotypescriptfile_server
regex_anchor_bypasspath_traversal_via_prefix
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]