Skip to content

Glossary: Application and Credential Attacks, and AI Risks

Traversal target files (/etc/passwd, /etc/shadow, win.ini)

Also written: /etc/passwd, etc/passwd, /etc/shadow, win.ini, boot.ini

System files attackers request to test directory traversal: /etc/passwd lists Linux accounts, /etc/shadow holds Linux password hashes, and win.ini or boot.ini are Windows files. Their names in a web request are a traversal clue, and /etc/passwd is also a common command injection target.

Where the book teaches it

Related terms

directory traversal../ (dot-dot-slash)command injectionhash