Exploiting Blind File Reads / Path Traversal Vulnerabilities on Microsoft Windows Operating Systems

Tue, 19 Jun 2018 01:31:00 -0700

In a recent engagement I was confronted with a blind path traversal vulnerability on a server running with the Microsoft Windows operating system. That is, it was not possible to display folder contents but the complete file name and path had to be guessed. Due to the lack of a comprehensive website I was forced to gather information from various different sources.

In this blog post, I want to summarize my findings and focus on the exploitation of this kind of vulnerability.

Path Traversal on soffensive blog

Exploiting Blind File Reads / Path Traversal Vulnerabilities on Microsoft Windows Operating Systems