Forum Discussion
OWASP 2017 Java Sensitive data exposure
what is the install path of the web application ?
I am not sure what this question mean
1 Reply
ok this is solved it wanted to get access of WEB-INF so when you try like below
pass the query parameter file=web.xml&path=../WEB-INF/
you will get /var/lib/tomcat9 as response which is installation directory
