Fixed #770: Zipped files with problematic filenames

2024-08-16 22:30:34 +03:00 · 2022-06-23 19:32:39 -03:00 · 2022-06-23 19:32:39 -03:00 · c8bc8eb242
commit c8bc8eb242
parent 4eb28683ab
19 changed files with 23 additions and 17 deletions
--- a/Payloads/File-Names/README.md
+++ b/Payloads/File-Names/README.md
@ -0,0 +1,23 @@
+# directory-traversal.zip
+
+This zip file containes files with filenames for directory traversal:
+
+- `..::..::;`
+- `..::;`
+- `..:;`
+- `..;`
+- `..;:`
+- `..\:;`
+- `.:..:`
+- `.:..:;`
+- `.:;`
+- `.;`
+- `.;:`
+- `:..:;`
+- `::..::;`
+- `:;`
+- `;`
+- `;:`
+- `;\:`
+
+It's impossible to unzip this file on Windows, due to their arbitrary filename restrictions. It's possible to unzip it in WSL though.
--- a/Payloads/File-Names/directory-traversal.zip
+++ b/Payloads/File-Names/directory-traversal.zip
--- a/Payloads/File-Names/traversal/..::..::;
+++ b/Payloads/File-Names/traversal/..::..::;
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/..::;
+++ b/Payloads/File-Names/traversal/..::;
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/..:;
+++ b/Payloads/File-Names/traversal/..:;
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/..;
+++ b/Payloads/File-Names/traversal/..;
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/..;:
+++ b/Payloads/File-Names/traversal/..;:
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/..\:;
+++ b/Payloads/File-Names/traversal/..\:;
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/.:..:
+++ b/Payloads/File-Names/traversal/.:..:
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/.:..:;
+++ b/Payloads/File-Names/traversal/.:..:;
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/.:;
+++ b/Payloads/File-Names/traversal/.:;
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/.;
+++ b/Payloads/File-Names/traversal/.;
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/.;:
+++ b/Payloads/File-Names/traversal/.;:
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/:..:;
+++ b/Payloads/File-Names/traversal/:..:;
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/::..::;
+++ b/Payloads/File-Names/traversal/::..::;
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/:;
+++ b/Payloads/File-Names/traversal/:;
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/;
+++ b/Payloads/File-Names/traversal/;
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/;:
+++ b/Payloads/File-Names/traversal/;:
@ -1 +0,0 @@
-Hello World
--- a/Payloads/File-Names/traversal/;\:
+++ b/Payloads/File-Names/traversal/;\:
@ -1 +0,0 @@
-Hello World