--- title: "#pathtraversal articles | Hashnode" description: "Explore 27 articles tagged #pathtraversal on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/pathtraversal" --- Tag # #pathtraversal 27 posts · 1 followers [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Oct 28](https://hashnode.com/posts/red-alert-cve-2026-21589-cvss-9-3-vulnerability-threatens-the-atlassian-backbone-of-businesses/6ae16dc22a4474cce44eefd8) ### [Red alert CVE-2026-21589: CVSS 9.3 vulnerability threatens the Atlassian "backbone" of businesses](https://blog.fiscybersec.com/red-alert-cve-2026-21589-cvss-9-3-vulnerability-threatens-the-atlassian-backbone-of-businesses?utm_source=hashnode&utm_medium=feed) About Atlassian Overview of Atlassian Atlassian is a world-leading enterprise software company founded in Australia. The company specializes in providing tools to support teamwork, project progress t 12 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/red-alert-cve-2026-21589-cvss-9-3-vulnerability-threatens-the-atlassian-backbone-of-businesses?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/red-alert-cve-2026-21589-cvss-9-3-vulnerability-threatens-the-atlassian-backbone-of-businesses/6ae16dc22a4474cce44eefd8) [kareem Mohamed](https://hashnode.com/@kmbkareem) · [Aug 10](https://hashnode.com/posts/the-hollow-shell-a-walkthrough-of-thm-hacker-holidays-day-10/6a79cd9c7ccefc16e0d147b7) ### [The Hollow Shell: A walkthrough of THM Hacker Holidays - Day 10](https://kmb.hashnode.dev/the-hollow-shell-a-walkthrough-of-thm-hacker-holidays-day-10?utm_source=hashnode&utm_medium=feed) Step-by-step THM Hacker Holidays Day 10 walkthrough. Master Zip Slip exploitation, path traversal, and reverse shell execution with 0xY0K4\_CL4W. 3 min read · [kmb.hashnode.dev](https://kmb.hashnode.dev/the-hollow-shell-a-walkthrough-of-thm-hacker-holidays-day-10?utm_source=hashnode&utm_medium=feed) [Renukashree Murali](https://hashnode.com/@quietbytes) · [Jul 18](https://hashnode.com/posts/jwt-attack-lab-part-5-kid-injection/6a5b04620f6c2fac43da161b) ### [JWT Attack Lab — Part 5: Path Traversal Through the kid Header](https://quietbytes.hashnode.dev/jwt-attack-lab-part-5-kid-injection?utm_source=hashnode&utm_medium=feed) The kid header tells a verifier which key to use — and it's attacker-controlled. Here's how that becomes path traversal, and full auth bypass. 4 min read · [quietbytes.hashnode.dev](https://quietbytes.hashnode.dev/jwt-attack-lab-part-5-kid-injection?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Jun 25](https://hashnode.com/posts/hackthebox-nexus-writeup/6a3ca96d707436cbeee8f40d) ### [HackTheBox: Nexus Writeup](https://exploitnotes.hashnode.dev/hackthebox-nexus-writeup?utm_source=hashnode&utm_medium=feed) Complete Nexus HTB writeup covering Git credential leaks, Krayin CRM file upload RCE, SSH password reuse, and Gitea path traversal root access. 15 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/hackthebox-nexus-writeup?utm_source=hashnode&utm_medium=feed) [Thuriaanandh V](https://hashnode.com/@thuriaanandh) · [Jun 13](https://hashnode.com/posts/path-traversal-6-labs-6-times-i-was-wrong-before-i-was-right/6a2da31f7776f29e92a14ea7) ### [Path Traversal: 6 Labs, 6 Times I Was Wrong Before I Was Right](https://thuriaanandh-sec.hashnode.dev/path-traversal-6-labs-6-times-i-was-wrong-before-i-was-right?utm_source=hashnode&utm_medium=feed) A hands-on walkthrough of all 6 PortSwigger path traversal labs, including the wrong turns I took before finding each correct bypass. 6 min read · [thuriaanandh-sec.hashnode.dev](https://thuriaanandh-sec.hashnode.dev/path-traversal-6-labs-6-times-i-was-wrong-before-i-was-right?utm_source=hashnode&utm_medium=feed) [Mouhamed Ben Abdallah](https://hashnode.com/@erinmin) · [May 2](https://hashnode.com/posts/file-path-traversal-simple-case-writeup-walkthrough/69f6871a0ab374db994d4c98) ### [File path traversal, simple case WriteUp & Walkthrough](https://erinmin-writeups.hashnode.dev/file-path-traversal-simple-case-writeup-walkthrough?utm_source=hashnode&utm_medium=feed) step-by-step PortSwigger lab walkthrough demonstrating a file path traversal (CWE-22). Learn to identify the flaw, and apply practical mitigations. 4 min read · [erinmin-writeups.hashnode.dev](https://erinmin-writeups.hashnode.dev/file-path-traversal-simple-case-writeup-walkthrough?utm_source=hashnode&utm_medium=feed) [Milan Nikic](https://hashnode.com/@nick79) · [Apr 28](https://hashnode.com/posts/directory-traversal-a-security-architect-s-perspective-part-3/69f09a8310a70b3335a0d205) ### [Directory Traversal: A Security Architect's Perspective (Part 3)](https://securitydepth.hashnode.dev/directory-traversal-a-security-architect-s-perspective-part-3?utm_source=hashnode&utm_medium=feed) Threat modeling, risk prioritization, compliance mapping for PCI-DSS, SOC 2, GDPR, and security metrics for directory traversal at scale. 16 min read · [securitydepth.hashnode.dev](https://securitydepth.hashnode.dev/directory-traversal-a-security-architect-s-perspective-part-3?utm_source=hashnode&utm_medium=feed) [Milan Nikic](https://hashnode.com/@nick79) · [Apr 20](https://hashnode.com/posts/directory-traversal-in-java-advanced-protection-and-testing-part-2/69e5f570a832607113eeeeeb) ### [Directory Traversal in Java: Advanced Protection and Testing (Part 2)](https://securitydepth.hashnode.dev/directory-traversal-in-java-advanced-protection-and-testing-part-2?utm_source=hashnode&utm_medium=feed) Advanced directory traversal protection in Java: secure Apache Commons IO use, frontend patterns, testing strategies, and SAST integration. 22 min read · [securitydepth.hashnode.dev](https://securitydepth.hashnode.dev/directory-traversal-in-java-advanced-protection-and-testing-part-2?utm_source=hashnode&utm_medium=feed) [Milan Nikic](https://hashnode.com/@nick79) · [Apr 7](https://hashnode.com/posts/directory-traversal-in-java-a-comprehensive-security-guide-part-1/69d4ee4c5da14bc70e382a00) ### [Directory Traversal in Java: A Comprehensive Security Guide (Part 1)](https://securitydepth.hashnode.dev/directory-traversal-in-java-a-comprehensive-security-guide-part-1?utm_source=hashnode&utm_medium=feed) Learn how directory traversal attacks exploit file path handling in Java apps. Covers attack vectors, vulnerable patterns, and Spring Boot defenses. 16 min read · [securitydepth.hashnode.dev](https://securitydepth.hashnode.dev/directory-traversal-in-java-a-comprehensive-security-guide-part-1?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Mar 28](https://hashnode.com/posts/team-ctf-challenge-thm/69c80f147cf27065103f1775) ### [Team (CTF Challenge - THM)](https://www.sharonjebitok.com/team-ctf-challenge-thm?utm_source=hashnode&utm_medium=feed) nmap -p- -sV IP\_Address PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd 3.0.5 22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.13 (Ubuntu Linux; protocol 2.0) 80/tcp open http Apache h 8 min read · [sharonjebitok.com](https://www.sharonjebitok.com/team-ctf-challenge-thm?utm_source=hashnode&utm_medium=feed)