> For the complete documentation index, see [llms.txt](https://simon-6.gitbook.io/simoncyber/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://simon-6.gitbook.io/simoncyber/ctf-writeups/picoctf-2022/web-exploitation/forbidden-paths.md).
# Forbidden Paths
This one is pretty easy as you just need to use a relative path (a path from your current directory)
**When to use path traversal:**
Look for anywhere a website takes a filename/path as input:
```
site.com/page?file=about.html
site.com/download?path=report.pdf
site.com/img?src=logo.png
```
If the server is just plugging your input directly into a file read, you can try traversing. Dead giveaway is when you see a filename in the URL parameter. You can also encode your URL.
{% embed url="" %}