This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Directory Traversal

1

hello how can I Find a host in a trace file that appears to be attempting Directory Traversal attack and get its IP address? tnx

asked 16 Apr '13, 09:02

parna's gravatar image

parna
26114
accept rate: 0%


One Answer:

1

I would start with this display filter:

http contains "../.."

Then look at the source IP address column.

Regards
Kurt

answered 16 Apr '13, 13:52

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%