dotdotpwn (path traversal)

dotdotpwn.pl -m http -h <target> -M GET -x 80

Perl tool to detect and exploit path traversal using different techniques (HTTP, FTP, etc.).

To automatically test whether a parameter is vulnerable to path traversal. dotdotpwn tests various depths and encodings, and can also search for known files. It is a simple and straightforward tool.

If the target has a WAF that blocks payloads, or if the parameter is not vulnerable. Also if the application is very slow, it can generate many requests.