HTTP Directory Traversal Attack via URI Path Traversal Sequences

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•2

This rule detects HTTP directory traversal attempts by inspecting incoming URI requests for common path traversal sequences such as '../', '..%2F', '..%2f', '..%5C', or '..%5c'. Attackers use these sequences to escape the web root directory and access unauthorized files on the server.