{"id":25639,"date":"2023-08-18T04:26:36","date_gmt":"2023-08-18T04:26:36","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=25639"},"modified":"2026-04-17T18:07:40","modified_gmt":"2026-04-17T18:07:40","slug":"path-traversal-attack-protection","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/path-traversal-attack-protection\/","title":{"rendered":"Path Traversal Attack Protection"},"content":{"rendered":"<!DOCTYPE html PUBLIC \"-\/\/W3C\/\/DTD HTML 4.0 Transitional\/\/EN\" \"http:\/\/www.w3.org\/TR\/REC-html40\/loose.dtd\">\n<html><body><p>A path traversal attack, or directory traversal, aims to access files and directories stored outside the web root folder. When the server does not check the user input strictly, by manipulating variables that reference files with &#8220;dot-dot-slash (..\/)&#8221; sequences and its variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on file system including application source code or configuration and critical system files. This attack is also known as &#8220;dot-dot-slash&#8221;, &#8220;directory traversal&#8221;, &#8220;directory climbing&#8221;, and &#8220;backtracking&#8221;. An attacker can obtain sensitive information from the server or control privileges of the system.<\/p>\n\n\n\n<p>The most basic path traversal attack uses the &#8220;.. \/&#8221; special-character sequence to alter the resource location requested in the URL. Although most popular web servers will prevent this technique from escaping the web document root, alternate encodings of the &#8220;.. \/&#8221; sequence may help bypass the security filters.<\/p>\n\n\n\n<p><strong>Bypass methods:<\/strong><\/p>\n\n\n\n<p> 1. Encryption of data passed by parameters<\/p>\n\n\n\n<p>Some web programs use Base64 or other encryption schemes to encrypt data passed by parameters. Unencrypted parameters supplied by attackers will not be parsed, making it impossible for attackers to implement directory traversal. To bypass this protection, they may encrypt parameters with Base64 before passing them.<\/p>\n\n\n\n<p>Example: <\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-8.png\"><img decoding=\"async\" width=\"310\" height=\"32\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-8.png\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-25659\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-8.png 310w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-8-300x31.png 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-8-200x21.png 200w\" sizes=\"(max-width: 310px) 100vw, 310px\" \/><\/a><\/figure>\n\n\n\n<p>2.  Encoding:<\/p>\n\n\n\n<p>Attackers may encode parameters, such as the URL, before passing them to bypass the protection.<\/p>\n\n\n\n<p>Example: <\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-7.png\"><img decoding=\"async\" width=\"505\" height=\"34\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-7.png\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-25657\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-7.png 505w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-7-300x20.png 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-7-200x13.png 200w\" sizes=\"(max-width: 505px) 100vw, 505px\" \/><\/a><\/figure>\n\n\n\n<p>3.  Directory access restriction bypass<\/p>\n\n\n\n<p> Some web applications adopt access restrictions to prevent unauthorized access by attackers. To bypass this mechanism, attackers may add special symbols, such as &#8220;~&#8221;, in a URL.<\/p>\n\n\n\n<p>Example:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-9.png\"><img decoding=\"async\" width=\"192\" height=\"25\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-9.png\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-25661\"><\/a><\/figure>\n\n\n\n<p>4.  Extension filtering bypass<\/p>\n\n\n\n<p>Some web applications check file name extensions before reading files. To bypass this check, attackers may append a null byte code to a file name.<\/p>\n\n\n\n<p>Example: <\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-10.png\"><img loading=\"lazy\" decoding=\"async\" width=\"184\" height=\"33\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-10.png\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-25663\"><\/a><\/figure>\n\n\n\n<p>5.  Source validation bypass<\/p>\n\n\n\n<p>Some web applications check whether parameters are supplied by trusted sources. To bypass this check, attackers may submit a URL on a website message board or at an interactive place, or directly change the HTTP referer.<\/p>\n\n\n\n<p>Example: path traversal attack demonstration by bWAPP OS command injection<\/p>\n\n\n\n<p>Insert malicious code into the input box:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/09\/WXWorkCapture_16947638157074.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/09\/WXWorkCapture_16947638157074.png\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-26156\" width=\"263\" height=\"29\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/09\/WXWorkCapture_16947638157074.png 490w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/09\/WXWorkCapture_16947638157074-300x33.png 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/09\/WXWorkCapture_16947638157074-200x22.png 200w\" sizes=\"(max-width: 263px) 100vw, 263px\" \/><\/a><\/figure>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-1.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"500\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-1-1024x500.png\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-25746\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-1-1024x500.png 1024w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-1-300x146.png 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-1-768x375.png 768w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-1-1536x750.png 1536w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-1-600x293.png 600w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-1-200x98.png 200w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-1.png 1920w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/div>\n\n\n<p><\/p>\n\n\n\n<p>bWAPP response:<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-2.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"500\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-2-1024x500.png\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-25748\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-2-1024x500.png 1024w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-2-300x146.png 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-2-768x375.png 768w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-2-1536x750.png 1536w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-2-600x293.png 600w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-2-200x98.png 200w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-2.png 1920w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/div>\n\n\n<p><\/p>\n\n\n\n<p>NSFOCUS WAF can analyze malicious scripts in the request packets and defend against malicious path traversal attacks.<\/p>\n\n\n\n<p>To configure path traversal protection on NSFOCUS WAF, follow these steps:<\/p>\n\n\n\n<p>1. Choose <strong>Security Management<\/strong> &gt;<strong> Policy Management <\/strong>&gt;<strong> Common Web Protection<\/strong>.<\/p>\n\n\n\n<p>2. Click <strong>Create<\/strong> in the upper-right corner of the page. <\/p>\n\n\n\n<p>3. Configure parameters in the <strong>Basic Information<\/strong> area as required, and click <strong>Path Traversal<\/strong><\/p>\n\n\n\n<p><strong>Protection<\/strong> on the rule list and select path traversal algorithms.<\/p>\n\n\n\n<p>4. Click <strong>OK<\/strong>.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-3.jpg\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-3-1024x500.jpg\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-25644\" width=\"711\" height=\"347\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-3-1024x500.jpg 1024w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-3-300x146.jpg 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-3-768x375.jpg 768w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-3-1536x750.jpg 1536w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-3-600x293.jpg 600w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-3-200x98.jpg 200w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-3.jpg 1920w\" sizes=\"(max-width: 711px) 100vw, 711px\" \/><\/a><\/figure>\n<\/div>\n\n\n<p><\/p>\n\n\n\n<p>5. Enable path traversal protection for a protected website.<\/p>\n\n\n\n<p>(1) Choose <strong>Security Management<\/strong> &gt; <strong>Website Protection<\/strong>, select a website group, and click <strong>Web Security Protection<\/strong>.<\/p>\n\n\n\n<p>(2) In the <strong>Basic Protection<\/strong> area, for<strong> Common Web Protection<\/strong>, select the policy created in steps 1&acirc;&euro;&ldquo;4, and click <strong>OK<\/strong>.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-4.jpg\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-4-1024x500.jpg\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-25646\" width=\"721\" height=\"352\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-4-1024x500.jpg 1024w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-4-300x146.jpg 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-4-768x375.jpg 768w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-4-1536x750.jpg 1536w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-4-600x293.jpg 600w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-4-200x98.jpg 200w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-4.jpg 1920w\" sizes=\"(max-width: 721px) 100vw, 721px\" \/><\/a><\/figure>\n<\/div>\n\n\n<p><\/p>\n\n\n\n<p>Check NSFOCUS WAF protection logs against bWAPP path traversal injections:<\/p>\n\n\n\n<p>Choose <strong>Logs &amp; Reports <\/strong>&gt;<strong> Security Protection Logs <\/strong>&gt;<strong> Web Security Logs.<\/strong><\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-5.jpg\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-5-1024x500.jpg\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-25648\" width=\"705\" height=\"344\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-5-1024x500.jpg 1024w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-5-300x146.jpg 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-5-768x375.jpg 768w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-5-1536x750.jpg 1536w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-5-600x293.jpg 600w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-5-200x98.jpg 200w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-5.jpg 1920w\" sizes=\"(max-width: 705px) 100vw, 705px\" \/><\/a><\/figure>\n<\/div>\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-6.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"500\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-6-1024x500.png\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-25751\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-6-1024x500.png 1024w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-6-300x146.png 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-6-768x375.png 768w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-6-1536x750.png 1536w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-6-600x293.png 600w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-6-200x98.png 200w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-6.png 1920w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n<\/div><\/body><\/html>\n","protected":false},"excerpt":{"rendered":"<p>A path traversal attack, or directory traversal, aims to access files and directories stored outside the web root folder. When the server does not check the user input strictly, by manipulating variables that reference files with &#8220;dot-dot-slash (..\/)&#8221; sequences and its variations or by using absolute file paths, it may be possible to access arbitrary [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":35690,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_coblocks_attr":"","_coblocks_dimensions":"","_coblocks_responsive_height":"","_coblocks_accordion_ie_support":"","footnotes":""},"categories":[21],"tags":[733],"class_list":["post-25639","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-waf","tag-waf"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Path Traversal Attack Protection - NSFOCUS<\/title>\n<meta name=\"description\" content=\"NSFOCUS WAF can analyze malicious scripts in the request packets and defend against malicious path traversal attacks.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Path Traversal Attack Protection - NSFOCUS\" \/>\n<meta property=\"og:description\" content=\"NSFOCUS WAF can analyze malicious scripts in the request packets and defend against malicious path traversal attacks.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nsfocusglobal.com\/path-traversal-attack-protection\/\" \/>\n<meta property=\"og:site_name\" content=\"NSFOCUS\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-18T04:26:36+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-17T18:07:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-8-1.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Path Traversal Attack Protection - NSFOCUS\" \/>\n<meta name=\"twitter:description\" content=\"NSFOCUS WAF can analyze malicious scripts in the request packets and defend against malicious path traversal attacks.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-8-1.png\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/path-traversal-attack-protection\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/path-traversal-attack-protection\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/person\\\/fd9ab61c9c77a81bbd870f725cc0c61d\"},\"headline\":\"Path Traversal Attack Protection\",\"datePublished\":\"2023-08-18T04:26:36+00:00\",\"dateModified\":\"2026-04-17T18:07:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/path-traversal-attack-protection\\\/\"},\"wordCount\":476,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/path-traversal-attack-protection\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/Figure-8-1.png\",\"keywords\":[\"waf\"],\"articleSection\":[\"WAF\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/nsfocusglobal.com\\\/path-traversal-attack-protection\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/path-traversal-attack-protection\\\/\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/path-traversal-attack-protection\\\/\",\"name\":\"Path Traversal Attack Protection - NSFOCUS\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/path-traversal-attack-protection\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/path-traversal-attack-protection\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/Figure-8-1.png\",\"datePublished\":\"2023-08-18T04:26:36+00:00\",\"dateModified\":\"2026-04-17T18:07:40+00:00\",\"description\":\"NSFOCUS WAF can analyze malicious scripts in the request packets and defend against malicious path traversal attacks.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/path-traversal-attack-protection\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/nsfocusglobal.com\\\/path-traversal-attack-protection\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/path-traversal-attack-protection\\\/#primaryimage\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/Figure-8-1.png\",\"contentUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/Figure-8-1.png\",\"width\":310,\"height\":32,\"caption\":\"Encoded text string on a white background.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/path-traversal-attack-protection\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/nsfocusglobal.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Path Traversal Attack Protection\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#website\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/\",\"name\":\"NSFOCUS\",\"description\":\"Security Made Smart and Simple\",\"publisher\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#organization\",\"name\":\"NSFOCUS\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/logo-ns.png\",\"contentUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/logo-ns.png\",\"width\":248,\"height\":36,\"caption\":\"NSFOCUS\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/person\\\/fd9ab61c9c77a81bbd870f725cc0c61d\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/nsfocusglobal.com\"],\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Path Traversal Attack Protection - NSFOCUS","description":"NSFOCUS WAF can analyze malicious scripts in the request packets and defend against malicious path traversal attacks.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"pt_BR","og_type":"article","og_title":"Path Traversal Attack Protection - NSFOCUS","og_description":"NSFOCUS WAF can analyze malicious scripts in the request packets and defend against malicious path traversal attacks.","og_url":"https:\/\/nsfocusglobal.com\/path-traversal-attack-protection\/","og_site_name":"NSFOCUS","article_published_time":"2023-08-18T04:26:36+00:00","article_modified_time":"2026-04-17T18:07:40+00:00","og_image":[{"url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-8-1.png","type":"","width":"","height":""}],"author":"admin","twitter_card":"summary_large_image","twitter_title":"Path Traversal Attack Protection - NSFOCUS","twitter_description":"NSFOCUS WAF can analyze malicious scripts in the request packets and defend against malicious path traversal attacks.","twitter_image":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-8-1.png","twitter_misc":{"Escrito por":"admin","Est. tempo de leitura":"5 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nsfocusglobal.com\/path-traversal-attack-protection\/#article","isPartOf":{"@id":"https:\/\/nsfocusglobal.com\/path-traversal-attack-protection\/"},"author":{"name":"admin","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/person\/fd9ab61c9c77a81bbd870f725cc0c61d"},"headline":"Path Traversal Attack Protection","datePublished":"2023-08-18T04:26:36+00:00","dateModified":"2026-04-17T18:07:40+00:00","mainEntityOfPage":{"@id":"https:\/\/nsfocusglobal.com\/path-traversal-attack-protection\/"},"wordCount":476,"commentCount":0,"publisher":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#organization"},"image":{"@id":"https:\/\/nsfocusglobal.com\/path-traversal-attack-protection\/#primaryimage"},"thumbnailUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-8-1.png","keywords":["waf"],"articleSection":["WAF"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nsfocusglobal.com\/path-traversal-attack-protection\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/nsfocusglobal.com\/path-traversal-attack-protection\/","url":"https:\/\/nsfocusglobal.com\/path-traversal-attack-protection\/","name":"Path Traversal Attack Protection - NSFOCUS","isPartOf":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nsfocusglobal.com\/path-traversal-attack-protection\/#primaryimage"},"image":{"@id":"https:\/\/nsfocusglobal.com\/path-traversal-attack-protection\/#primaryimage"},"thumbnailUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-8-1.png","datePublished":"2023-08-18T04:26:36+00:00","dateModified":"2026-04-17T18:07:40+00:00","description":"NSFOCUS WAF can analyze malicious scripts in the request packets and defend against malicious path traversal attacks.","breadcrumb":{"@id":"https:\/\/nsfocusglobal.com\/path-traversal-attack-protection\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nsfocusglobal.com\/path-traversal-attack-protection\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/nsfocusglobal.com\/path-traversal-attack-protection\/#primaryimage","url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-8-1.png","contentUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2023\/08\/Figure-8-1.png","width":310,"height":32,"caption":"Encoded text string on a white background."},{"@type":"BreadcrumbList","@id":"https:\/\/nsfocusglobal.com\/path-traversal-attack-protection\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nsfocusglobal.com\/"},{"@type":"ListItem","position":2,"name":"Path Traversal Attack Protection"}]},{"@type":"WebSite","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#website","url":"https:\/\/nsfocusglobal.com\/pt-br\/","name":"NSFOCUS","description":"Security Made Smart and Simple","publisher":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nsfocusglobal.com\/pt-br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#organization","name":"NSFOCUS","url":"https:\/\/nsfocusglobal.com\/pt-br\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/logo\/image\/","url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/08\/logo-ns.png","contentUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/08\/logo-ns.png","width":248,"height":36,"caption":"NSFOCUS"},"image":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/person\/fd9ab61c9c77a81bbd870f725cc0c61d","name":"admin","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/nsfocusglobal.com"],"url":"https:\/\/nsfocusglobal.com\/pt-br\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts\/25639","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/comments?post=25639"}],"version-history":[{"count":0,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts\/25639\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/media\/35690"}],"wp:attachment":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/media?parent=25639"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/categories?post=25639"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/tags?post=25639"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}