> ## Documentation Index
> Fetch the complete documentation index at: https://blacklab.windmotion.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Path Traversal

> Learn what Path Traversal is and how BlackLab WAF protects against it

Path Traversal is a vulnerability where an attacker tries to access files outside the intended directory by using patterns like `../`.

***

## Example attack

```http theme={null}
GET /download?file=../../etc/passwd
If not protected, this could expose sensitive files from the server.

How BlackLab helps
BlackLab’s Path Traversal plugin blocks suspicious patterns such as:
```

../ or ..%2F

```
Attempts to escape the application directory

Direct access to restricted system files
```