HTTP Path Traversal Repeated ../ or ..%2F Sequences in Inbound URI

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•0

This rule detects repeated path traversal sequences (../ or ..%2F) in the HTTP URI. This behavior is indicative of an attacker attempting to escape the intended web directory to access sensitive files or configuration files on the underlying filesystem.