Quick video to show an issue I ran into using `curl` to exploit a directory traversal / file read vulnerabilty, and how to avoid it. Uses the OpenSource box from HackTheBox as an example.
Full OpenSource Writeup: https://0xdf.gitlab.io/2022/10/08/htb...
☕ Buy Me A Coffee: https://www.buymeacoffee.com/0xdf
[00:00] Introduction
[00:25] Showing File Read and Directory Traversal
[01:45] Showing issue where file fails to return
[02:27] Troubleshooting in Wireshark
[04:00] Solution - using `--ignore-content-length` option
On this page of the site you can watch the video online Directory Traversal / File Read / Content Length [HackTheBox OpenSource] with a duration of hours minute second in good quality, which was uploaded by the user 0xdf 08 October 2022, share the link with friends and acquaintances, this video has already been watched 1,856 times on youtube and it was liked by 121 viewers. Enjoy your viewing!