Directory traversal is the ability to be able to go through the entire computer
systems or operating systems directory structure and be able to navigate freely
and move about.
Now you don't have to have your tray table up either seat in the full up right
position to be able to do this.
You just have to kind of be able to know your way around the operating system.
And you may remember earlier in this entirety of the course where we said and
went through some examples to where we have to be familiar with the operating
system and understand what it is that we're actually attacking before we attack
.
And in the pen testing lifecycle, you may also notice that there's a couple of
steps in the beginning that send us through that. But I'm not going to hammer
on that. What we're going to touch on in this particular skill is the ability
to conduct directory traversal not only within the actual operating system
itself, but also use it our fake website that set up as our practice lab and
manipulate some PHP code with tools like burp suite to actually go through the
entire computer system.
To actually go through and crack inside of the website to do some traversing
and see the actual structure of the system overall.
Now that may sound like a lot, but don't worry, we're going to walk through
this step by step, get a little bit of refresher in and readjust ourselves to
make sure we're in line with the directory structures and whatnot, and then
start moving forward into applying some of the tools that we've come across so
far.
So let's strap in and do it to it.