Directory / Path Traversal

Cross-platform resources for Directory / Path Traversal: curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

This page aggregates cross-platform resources to practice Directory / Path Traversal: retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

Coverage: 17 challenges across 3 platforms — 4 HackTheBox · 8 PortSwigger · 5 TryHackMe. 4 with a Spanish writeup, 8 with a video writeup.

Where to start

Ordered by actual difficulty. At the same level: isolated lab first, then the guided room, and the full machine last.

1. PortSwigger — File path traversal, simple case (Apprentice) · 🇬🇧 📹
2. TryHackMe — Advent of Cyber 3 (2021) (Easy · ~1440 min) · 🇬🇧
3. TryHackMe — Badbyte (Easy · ~45 min) · 🇬🇧
4. HackTheBox — Arctic (Fácil) · 🇪🇸 🇬🇧 📹
5. HackTheBox — Blunder (Fácil) · 🇪🇸 🇬🇧 📹
6. HackTheBox — ServMon (Fácil) · 🇪🇸 🇬🇧 📹

Curated resources

Source	Link
PortSwigger	https://portswigger.net/web-security/file-path-traversal

HTB machines practicing Directory / Path Traversal (4)

Machine	OS	Difficulty	Writeup
Arctic	Windows	EASY	🇪🇸 🇬🇧 📹
Blunder	Linux	EASY	🇪🇸 🇬🇧 📹
Feline	Linux	HARD	🇪🇸 🇬🇧 📹
ServMon	Windows	EASY	🇪🇸 🇬🇧 📹

PortSwigger labs practicing Directory / Path Traversal (8)

Lab	Difficulty	Topic	Official
File path traversal, simple case	APPRENTICE	Directory / Path Traversal	Open
File path traversal, traversal sequences blocked with absolute path bypass	PRACTITIONER	Directory / Path Traversal	Open
File path traversal, traversal sequences stripped non-recursively	PRACTITIONER	Directory / Path Traversal	Open
File path traversal, traversal sequences stripped with superfluous URL-decode	PRACTITIONER	Directory / Path Traversal	Open
File path traversal, validation of file extension with null byte bypass	PRACTITIONER	Directory / Path Traversal	Open
File path traversal, validation of start of path	PRACTITIONER	Directory / Path Traversal	Open
JWT authentication bypass via kid header path traversal	PRACTITIONER	JWT (JSON Web Tokens)	Open
Web shell upload via path traversal	PRACTITIONER	File Upload Vulnerabilities	Open

TryHackMe rooms practicing Directory / Path Traversal (5)

Room	Difficulty	Type	Access	Official
Advent of Cyber 3 (2021)	EASY	Walkthrough	🟢 Free	Open
Badbyte	EASY	Walkthrough	🟢 Free	Open
File Inclusion	MEDIUM	Walkthrough	🔵 VIP	Open
File Inclusion, Path Traversal	MEDIUM	Walkthrough	🔵 VIP	Open
Splunk Basics - Did you SIEM?	MEDIUM	Walkthrough	🟢 Free	Open

Related skills

• /en/skills/lfi

---

← Back to the full glossary

Last updated: 2026-08-17