AUTOMATING CLIENT SIDE PATH TRAVERSAL DISCOVERY

Summary from the TLDR InfoSec newsletter

Client Side Path Traversal (CSPT) is a vulnerability that occurs when a client can provide path traversal characters (../) in a request to modify a different request. This can be chained with Open Redirect vulnerabilities to control the response returned to the client. This post describes the process of creating a Chrome extension to automate the discovery of CSPT vulnerabilities using dynamic analysis.