DiscoverHacked & Secured: Pentest Exploits & MitigationsEp. 9 – Directory Traversal & LFI: From File Leaks to Full Server Crash
Ep. 9 – Directory Traversal & LFI: From File Leaks to Full Server Crash

Ep. 9 – Directory Traversal & LFI: From File Leaks to Full Server Crash

Update: 2025-05-29
Share

Description

One markdown link copied server files. One poisoned log triggered remote code execution. One LFI crashed the entire server.
In this episode, we unpack three real-world exploits—directory traversal and local file inclusion flaws that went far beyond file reads. From silent data leaks to full server compromise, these attacks all started with a single trusted path.

Chapters:

00:00 - INTRO

01:07 - FINDING #1 - Server File Theft with Directory Traversal

09:23 - FINDING #2 - From File Inclusion to RCE via Log Poisoning

16:20 - FINDING #3 - LFI to Server Crash

24:09 - OUTRO

Want your pentest discovery featured? Submit your creative findings through the Google Form in the episode description, and we might showcase your finding in an upcoming episode!

🌍 Follow & Connect → LinkedIn, YouTube, Twitter, Instagram
📩 Submit Your Pentest Findings → https://forms.gle/7pPwjdaWnGYpQcA6A
📧 Feedback? Email Us podcast@quailu.com.au
🔗 Podcast Website → Website Link

Comments 
loading
00:00
00:00
1.0x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

Ep. 9 – Directory Traversal & LFI: From File Leaks to Full Server Crash

Ep. 9 – Directory Traversal & LFI: From File Leaks to Full Server Crash

Amin Malekpour