Test files › Security and validation › path-traversal-payloads.txt
Sample TXT file
A newline-delimited list of path-traversal encodings: plain, URL-encoded, double-encoded, UTF-8 overlong, backslash and mixed variants. Intended as fuzzer input, not as a file to extract.
↓ Download path-traversal-payloads.txt| Filename | path-traversal-payloads.txt |
| Format | TXT |
| Size | 305 bytes (305 bytes) |
| MIME type | text/plain; charset=utf-8 |
| SHA-256 | d28d1320f9769e30d043f970fd9ca87134427d4e03ea395e03377e8d811bbf3e |
What this file catchesPath canonicalisation. A correct implementation resolves and then verifies containment; a naive one filters the literal string "../" and misses every other row in this file.
Download & verify
curl -fsSL -o "path-traversal-payloads.txt" "https://files.hexaqa.com/security/path-traversal-payloads.txt"
curl -fsSL "https://files.hexaqa.com/security/path-traversal-payloads.txt" | sha256sum
# expect: d28d1320f9769e30d043f970fd9ca87134427d4e03ea395e03377e8d811bbf3e