Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

Full Path Disclosure


ghost's Avatar
0 0

I know what it is, but I don't understand how you would exploit it. If you find a vulnerability like this where a website discloses the full path to a said file, how do you exploit this and actually view the source code of the file? etc…


ghost's Avatar
0 0

Getting information is always good.

First, you knew there was soup. Now, you know the soup is warm. Proceed!


ghost's Avatar
0 0

Mephisto wrote: Getting information is always good.

First, you knew there was soup. Now, you know the soup is warm. Proceed!

lol thanks. I was thinking about it, and if you were to use it to replace a file you would need to know where its location is on the server.. So i guess that would be one way to use it.