security enabled verified medium v1.0.0

dotdotpwn

Directory traversal fuzzing tool that tests for path traversal vulnerabilities in web applications and services via HTTP, FTP, and TFTP protocols.

📋 Live Preview

dotdotpwn {flag-protocol} {flag-port} {flag-depth} {flag-os} {flag-file} {flag-threads} {flag-dictionary} {flag-cookie} {flag-output} {flag-url} -m {target}

📎 flag-protocol 📎 flag-port 📎 flag-depth 📎 flag-os 📎 flag-file 📎 flag-threads 📎 flag-dictionary 📎 flag-cookie 📎 flag-output 📎 flag-url 📎 target

dotdotpwn {flag-protocol} {flag-port} {flag-depth} {flag-os} {flag-file} {flag-threads} {flag-dictionary} {flag-cookie} {flag-output} {flag-url} -m {target}

Sandbox: execFile · Timeout: 300s

Capabilities

web.traversal.fuzz

web.traversal.detect

web.traversal.http

web.traversal.ftp

web.traversal.payload

Parameters

Name	Type	Required	Default	Description	Aliases
`target`	string	Yes	-	Target host or URL	`-m`, `--host`
`flag-port`	integer	No	-	Target port	`-p`, `--port`
`flag-protocol`	string	No	-	Protocol (http, ftp, tftp)	`-P`, `--protocol`
`flag-url`	string	No	-	Full target URL with traversal placeholder	`-u`, `--url`
`flag-dictionary`	string	No	-	Custom wordlist file	`-d`, `--dictionary`
`flag-depth`	integer	No	-	Traversal depth	`--depth`
`flag-os`	string	No	-	Target OS (unix, windows)	`-O`, `--os`
`flag-file`	string	No	-	File to search for	`-f`, `--file`
`flag-output`	string	No	-	Output file for results	`-o`, `--output`
`flag-threads`	integer	No	-	Number of threads	`-T`, `--threads`
`flag-cookie`	string	No	-	HTTP Cookie header	`-C`, `--cookie`

Artifacts

Type	Description	MIME	Schema	Trust
`web.traversal.report`	Directory traversal scan results	text/plain	-	verified

Contract

Inputs

web.target.url

Target URL or host

network.port

Target port

Outputs

web.traversal.report

Detected traversal vulnerabilities

Side effects: network_traffic

Workflow Edges

Produces

web.traversal.report

Consumes

web.target.urlnetwork.port

Resource Profile

Resource	Value
CPU	low
Memory	64 MB
Network	low
Disk I/O	low

Examples

HTTP directory traversal scan

dotdotpwn -m http://example.com -u /page.php?file=TRAVERSAL -d /etc/passwd

FTP traversal scan

dotdotpwn -m ftp://example.com -p 21

Custom depth and OS

dotdotpwn -m http://example.com -u /page.php?file=TRAVERSAL -d /etc/passwd --depth 10 -O unix

Documentation

DotDotPwn — Directory Traversal Fuzzer

DotDotPwn is a Perl-based directory/path traversal fuzzer that tests web applications, FTP servers, and TFTP servers for path traversal vulnerabilities. It supports multiple encoding techniques and traversal depths.

Usage

# HTTP traversal
dotdotpwn -m http://target.com -u /page.php?file=TRAVERSAL -d /etc/passwd

# FTP traversal
dotdotpwn -m ftp://target.com -p 21

# With cookie authentication
dotdotpwn -m http://target.com -u /page.php?file=TRAVERSAL -C "PHPSESSID=abc123" -d /etc/passwd

# Custom wordlist
dotdotpwn -m http://target.com -u /page.php?file=TRAVERSAL -d mylist.txt --depth 8

Dependencies

perllibwww-perl

Related Tools

kadimuslfi-suitecommixnmap

References

DotDotPwn GitHub