webPromedium
Lab 161 — PageForge — Path Traversal via Mixed Slash Filter Bypass
hackadvisor
Task: PHP CMS with theme template preview feature that filters ../ path traversal sequences. Solution: Bypassed the filter using mixed slash notation (..\\/..\\/) which PHP normalizes to parent directory traversal, reading /root/flag.txt.
$ ls tags/ techniques/
mixed_slash_filter_bypassbackslash_forward_slash_traversalpath_traversal_filter_evasion
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]PageForge— hackadvisor
- [web][Pro]Lab 209 — BuildForge — Path Traversal in Static File Serving— hackadvisor
- [web][Pro]Lab 158 — PageCraft — Twig Template Path Traversal via Namespace Bypass— hackadvisor
- [web][Pro]Lab 160 — WikiForge — Nginx Alias Path Traversal— hackadvisor
- [web][Pro]Lab 254 — PageForge — ZIP Upload File Type Bypass to RCE— hackadvisor