While auditing a web application for vulnerabilities, Donald uses Burp proxy and modifies the get requests as below: http://www.example.com/GET/process.php./../../../../../../../../etc/password What is Donald trying to achieve?

Question

Quizplus · Accepted Answer

Donald is attempting a directory traversal attack to access the /etc/password file, which is a common technique to access files outside the web root directory by manipulating file paths.

While Auditing a Web Application for Vulnerabilities, Donald Uses Burp