Results 1 to 5 of 5

Thread: Directory Transversal

  1. Aug 31st, 2006, 03:43 AM #1
    iaarchia
    iaarchia is offline

    Thread Starter
    New Member
    Join Date
    Aug 2006
    Posts
    10

    Directory Transversal

    Hey,

    What would be a good way to protect a custom server against directory traversal attacks besides filtering [..], [%] characters?

    Cheers,
    Reply With Quote Reply With Quote
  2. Aug 31st, 2006, 04:28 PM #2
    Al42
    Al42 is offline
    PowerPoster
    Join Date
    Feb 2006
    Location
    East of NYC, USA
    Posts
    5,691

    Re: Directory Transversal

    From where? The console of that computer? Within the LAN? A connection to a web server on that computer from the WAN?
    The most difficult part of developing a program is understanding the problem.
    The second most difficult part is deciding how you're going to solve the problem.
    Actually writing the program (translating your solution into some computer language) is the easiest part.
    Please indent your code and use [HIGHLIGHT="VB"] [/HIGHLIGHT] tags around it to make it easier to read.
    Please Help Us To Save Ana
    Reply With Quote Reply With Quote
  3. Aug 31st, 2006, 05:45 PM #3
    iaarchia
    iaarchia is offline

    Thread Starter
    New Member
    Join Date
    Aug 2006
    Posts
    10

    Re: Directory Transversal

    Thanks for your reply.

    I mean inside the software; I am developing a small custom file server that has to be protected against forced directory transversal attacks.
    Reply With Quote Reply With Quote
  4. Sep 1st, 2006, 02:25 PM #4
    Al42
    Al42 is offline
    PowerPoster
    Join Date
    Feb 2006
    Location
    East of NYC, USA
    Posts
    5,691

    Re: Directory Transversal

    If you don't give me enough information, I can't help you. Software accessed how? From the console of that computer? From within the LAN? From a connection to a web server on that computer from the WAN? Whether it's "inside the software" or not is meaningless. Do you mean not allow users accessing a web server from seeing the directories? If it's a file server, you want your users to access the files - that's the function of a file server.
    The most difficult part of developing a program is understanding the problem.
    The second most difficult part is deciding how you're going to solve the problem.
    Actually writing the program (translating your solution into some computer language) is the easiest part.
    Please indent your code and use [HIGHLIGHT="VB"] [/HIGHLIGHT] tags around it to make it easier to read.
    Please Help Us To Save Ana
    Reply With Quote Reply With Quote
  6. Sep 1st, 2006, 08:45 PM #5
    iaarchia
    iaarchia is offline

    Thread Starter
    New Member
    Join Date
    Aug 2006
    Posts
    10

    Re: Directory Transversal

    I am writing a simple file server.

    I just want to know what kind of characters I need to filter out to prevent directory traversal attacks.

    For example, /opt/../ would be such an example. [..] would need to get filtered out.

    What other characters are unsafe?

    Cheers,
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules


Click Here to Expand Forum to Full Width