MikroTik WebFig /jsproxy Path Traversal Attempt

Ibrahim Saud@tektrix

•updated Sep 24, 2026•0•0•6

Detects attempts to perform path traversal attacks against the MikroTik RouterOS WebFig interface via the jsproxy endpoint. The rule monitors HTTP proxy traffic for directory traversal sequences (e.g., '../' or URL encoded equivalents) within the query parameters of requests directed to the jsproxy URI.