News for hackers. Stuff that matters.

A comment on One in every 600 websites has .git exposed. Parent comment

Re:One in every 600 websites has .git exposed by tracker1 on Monday July 27, 2015 @12:42AM (#9953384)
Hell, I recently saw an application where there was unchecked input for being able to download files outside the application... if you passed it a path of, for example `../../somefoo-file` would take you out of that application's path.
[ Parent | on HN ]
Re:One in every 600 websites has .git exposed by ejcx on Monday July 27, 2015 @01:11AM (#9953451)
This is called either a Local File Inclusion or a Directory Traversal Vulnerability. The name depends on the details. It's really really common, and definitely something I see a lot of.

The OWASP Top 10 is deadly.

[ Parent | on HN ]