Directory Traversal — Defensive Guide

Directory Traversal (a.k.a. path traversal) happens when an application uses user-supplied input to select files or paths without properly constraining that input. Attackers can attempt to access files outside the intended directory. Always test only in labs or with explicit permission; never probe or exploit third-party systems.