The article walks through the discovery of an arbitrary ZIP‑file download vulnerability in a large OA front‑end, detailing how the attacker traced the vulnerable Spring MVC controller, built a PoC using a controllable cookie, achieved directory‑traversal reads, demonstrated a DOS extension, and finally suggested input‑filter mitigations.
The article explains the directory‑traversal optimization introduced in Go 1.16, compares the old and new APIs with benchmarks, dives into the underlying system‑call changes, shows which file systems support the improvement, and demonstrates how similar gains can be achieved in C, C++, and Python.
This article explains the newly added os.Root type and os.OpenRoot function in Go 1.24, demonstrates how they restrict file operations to a specific directory, and shows how they prevent classic directory‑traversal exploits such as CVE‑2024‑3400.
This article explains PHP's is_dir() function, demonstrates how it checks whether a path is a directory, provides simple and advanced code examples—including directory traversal with opendir() and readdir()—and offers practical usage tips for developers.
This article explains PHP's is_dir() function, shows how it determines whether a path is a directory, provides basic and advanced code examples for checking and traversing directories, and highlights important usage considerations for reliable file system operations.
This article explains the directory‑traversal optimization introduced in Go 1.16, shows benchmark results where the new APIs (os.ReadDir, (*os.File).ReadDir, filepath.WalkDir) run up to 4.8 times faster than the old approach, and details the underlying mechanism that reduces system calls by leveraging file‑system‑provided metadata.
This article explains how to use PHP functions such as opendir, readdir, is_dir, and scandir to open directories, read file names, perform recursive traversal of subfolders, and retrieve file information, providing clear code examples for each method.
This article provides a comprehensive guide to PHP's readdir() function, covering its syntax, basic usage with code examples, important considerations such as handling '.' and '..' entries, and advanced techniques like combining with is_dir() to differentiate files and directories for efficient file system operations.
This article explains what directory (path) traversal is, demonstrates how attackers can read or write arbitrary files on a server by manipulating file‑path parameters, outlines common bypass techniques, and provides concrete defensive coding practices to mitigate the vulnerability.
This guide introduces Python’s os.walk module, explains its top‑down and bottom‑up traversal modes, and demonstrates how to list files, filter by extension, enumerate subdirectories, and create a complete log‑organizing script that moves, deduplicates, and records files based on date.
