Directory / Path Traversal

Cross-platform resources for Directory / Path Traversal: curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

Directory / Path Traversal

This page aggregates cross-platform resources to practice Directory / Path Traversal: retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

Curated resources

Source	Link
PortSwigger	https://portswigger.net/web-security/file-path-traversal

HTB machines practicing Directory / Path Traversal (4)

Machine	OS	Difficulty
Arctic	Windows	EASY
Blunder	Linux	EASY
Feline	Linux	HARD
ServMon	Windows	EASY

PortSwigger labs practicing Directory / Path Traversal (8)

Lab	Difficulty	Topic	Official
File path traversal, simple case	APPRENTICE	Directory / Path Traversal	Open
File path traversal, traversal sequences blocked with absolute path bypass	PRACTITIONER	Directory / Path Traversal	Open
File path traversal, traversal sequences stripped non-recursively	PRACTITIONER	Directory / Path Traversal	Open
File path traversal, traversal sequences stripped with superfluous URL-decode	PRACTITIONER	Directory / Path Traversal	Open
File path traversal, validation of file extension with null byte bypass	PRACTITIONER	Directory / Path Traversal	Open
File path traversal, validation of start of path	PRACTITIONER	Directory / Path Traversal	Open
JWT authentication bypass via kid header path traversal	PRACTITIONER	JWT (JSON Web Tokens)	Open
Web shell upload via path traversal	PRACTITIONER	File Upload Vulnerabilities	Open

TryHackMe rooms practicing Directory / Path Traversal (5)

Room	Difficulty	Type	Access	Official
Advent of Cyber 3 (2021)	EASY	Walkthrough	🟢 Free	Open
Badbyte	EASY	Walkthrough	🟢 Free	Open
File Inclusion	MEDIUM	Walkthrough	🔵 VIP	Open
File Inclusion, Path Traversal	MEDIUM	Walkthrough	🔵 VIP	Open
Splunk Basics - Did you SIEM?	MEDIUM	Walkthrough	🟢 Free	Open

Related skills

• /en/skills/lfi

---

← Back to the full glossary

Last updated: 2026-06-07