curl --path-as-is http://localhost:3000/../etc/passwd

Category: Web App Development

curl --path-as-is http://localhost:3000/../etc/passwd

Test path traversal without normalizing the URL

Sends the literal URL including the ../ segment, because curl otherwise normalizes dot segments before requesting. Use it to probe whether a server leaks files outside the web root. A patched server returns 400 or 404 instead of file contents.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.