GET A FREE TECH DEMO
See how we can demonstrate the savings on login times, storage costs and much more.
Ready to see what WebData Control can do for you? Fill in the short form and we'll show you the software in action.
See how we can demonstrate the savings on login times, storage costs and much more.
Ready to see what WebData Control can do for you? Fill in the short form and we'll show you the software in action.
: The characters 2F represent the hex-encoded value for a forward slash ( / ). Decoded, this reads as ../../../../ , which tells the server's operating system to step backward out of the web server's public root directory (like /var/www/html/ ) and enter the system's foundational root ( / ) directory.
It attempts to reach: ../../../../home/*/.aws/credentials -file-..-2F..-2F..-2F..-2Fhome-2F-2A-2F.aws-2Fcredentials
To understand the danger, we have to break the payload down into its functional parts: : The characters 2F represent the hex-encoded value
Are you currently using or IAM roles for your infrastructure? Share public link this reads as ../../../../
Prevention and Mitigation:
: This translates to /home/*/ . It targets the home directories of users on the system.