Deep Dive into Directory Traversal and File Inclusion Attacks leads to Privilege Escalation

In Modern Web application directory traversal vulnerability that can potentially allow an attacker to view arbitrary files and some sensitive files. They can exploit identified vulnerabilities or misconfigurations to obtain root privileges. When building the web application, ensure that some arbitrary file is not publicly available via the production server. when an attacker can include. Traversal vulnerabilities this vulnerability exploits the dynamic file include a mechanism that exists in programming frameworks a local file inclusion happens when uncontrolled user input such as form values or headers for example are used to construct a file include paths. By exploiting directory traversal attacks in web servers, they can do anything and with chaining with code injection they can upload a shell into a web server and perform a website defacement attack. Path-traversal attacks take advantage of vulnerable Website parameters by including a URL reference to remotely hosted malicious code, allowing remote code execution and leads to privilege escalation attack.

WEB CIBERSECURITY - Danger of PHP Code Injection Vulnerability

This work demonstrates that the use of laboratories for the development of curricular work in the area of information technology exclusively supported by cloud computing technology does not decrease the level of learning and assessment objects on the part of students. This scenario arose due to the need to interrupt face-to-face classes in physical laboratories due to the COVID-19 Pandemic. The study had as universe a master's degree in Computer Science.