{"id":4186,"date":"2021-10-11T09:10:28","date_gmt":"2021-10-11T09:10:28","guid":{"rendered":"https:\/\/www.irandnn.ir\/mag\/?p=4186"},"modified":"2022-03-07T08:03:31","modified_gmt":"2022-03-07T08:03:31","slug":"directory-traversal-vulnerability","status":"publish","type":"post","link":"https:\/\/www.irandnn.ir\/mag\/directory-traversal-vulnerability\/","title":{"rendered":"\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Directory Traversal \u0686\u06cc\u0633\u062a\u061f"},"content":{"rendered":"<span class=\"span-reading-time rt-reading-time\" style=\"display: block;\"><span class=\"rt-label rt-prefix\">\u0632\u0645\u0627\u0646 \u0645\u0637\u0627\u0644\u0639\u0647:<\/span> <span class=\"rt-time\"> 6<\/span> <span class=\"rt-label rt-postfix\">\u062f\u0642\u06cc\u0642\u0647<\/span><\/span><p>\u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u0645\u06cc\u200c\u062f\u0627\u0646\u06cc\u062f\u060c \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u060c \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0648\u0627\u0633\u0637\u0647\u200c\u0627\u06cc \u062a\u062d\u062a \u0639\u0646\u0648\u0627\u0646 \u0633\u0631\u0648\u0631\u060c \u0628\u0627 \u0645\u062d\u062a\u0648\u0627\u06cc \u0645\u062f\u0646\u0638\u0631 \u062f\u0631 \u0627\u0631\u062a\u0628\u0627\u0637 \u0647\u0633\u062a\u0646\u062f. \u0627\u0645\u0627 \u0627\u06cc\u0646 \u0627\u0631\u062a\u0628\u0627\u0637 \u0628\u06cc\u0646 \u06a9\u0627\u0631\u0628\u0631 \u0648 \u0645\u062d\u062a\u0648\u0627\u060c \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u06a9\u0647 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0634\u062f\u0647 \u0627\u0646\u062c\u0627\u0645 \u0634\u0648\u062f \u062a\u0627 \u0627\u0641\u0631\u0627\u062f\u060c \u0628\u0647 \u0645\u062d\u062a\u0648\u0627\u06cc \u062f\u0631\u0633\u062a\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u0646\u062f. \u062f\u0631 \u063a\u06cc\u0631 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a\u060c \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u06af\u0641\u062a\u0647 \u0634\u062f\u0647\u060c \u062f\u0631 \u0645\u0642\u0627\u0628\u0644 \u062d\u0645\u0644\u0627\u062a\u06cc \u0645\u0627\u0646\u0646\u062f Directory \u00a0Traversal\u060c \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0628\u0627\u0634\u062f. \u062f\u0631 \u0635\u0648\u0631\u062a \u0648\u062c\u0648\u062f \u0627\u06cc\u0646 \u0628\u0627\u06af\u060c \u0627\u06cc\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0628\u0647 \u0646\u0641\u0648\u0630\u06af\u0631 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a\u06cc \u062d\u06cc\u0627\u062a\u06cc \u0627\u0632 \u0633\u0631\u0648\u0631 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f \u06a9\u0647 \u0628\u0647 \u062e\u0648\u062f\u06cc \u062e\u0648\u062f\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062a\u0647\u062f\u06cc\u062f \u0628\u0632\u0631\u06af\u06cc \u0628\u0631\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a \u0648\u0628\u200c\u0633\u0631\u0648\u0631 \u0633\u0627\u06cc\u062a\u060c \u0628\u0647 \u0634\u0645\u0627\u0631 \u0628\u0631\u0648\u062f.<\/p>\n<p>\u0647\u0645\u0631\u0627\u0647 \u0645\u0627 \u0628\u0627\u0634\u06cc\u062f \u062a\u0627 \u0628\u0647 \u0637\u0648\u0631 \u06a9\u0627\u0645\u0644 \u0628\u0627 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Directory Traversal \u0622\u0634\u0646\u0627 \u0634\u0648\u06cc\u0645.<\/p>\n<h2><strong>\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc <span style=\"font-size: 18pt;\">Directory Traversal \u0686\u06cc\u0633\u062a\u061f<\/span><\/strong><\/h2>\n<p>\u0646\u0627\u0645 \u06a9\u0627\u0645\u0644 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u060c Directory Traversal File Include (\u067e\u06cc\u0645\u0627\u06cc\u0634 \u067e\u0648\u0634\u0647\u200c\u0647\u0627\u06cc \u0634\u0627\u0645\u0644 \u067e\u0631\u0648\u0646\u062f\u0647) \u0645\u06cc\u200c\u0628\u0627\u0634\u062f \u06a9\u0647 \u0628\u0647 \u0622\u0646 Path Traversal (\u067e\u06cc\u0645\u0627\u06cc\u0634 \u0645\u0633\u06cc\u0631)\u060c dot-dot-slash Attack (\u062d\u0645\u0644\u0647\u200c\u06cc ..\/)\u060cbacktracking(\u0628\u0627\u0632\u06af\u0634\u062a \u0628\u0647 \u0639\u0642\u0628) \u06cc\u0627 Directory Climbing(\u067e\u0648\u0634\u0647 \u0646\u0648\u0631\u062f\u06cc) \u06af\u0641\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0645\u0627 \u062f\u0631 \u0627\u06cc\u0646 \u0646\u0648\u0634\u062a\u0627\u0631\u060c \u0628\u06cc\u0634\u062a\u0631 \u0628\u0627 \u0646\u0627\u0645 Directory Traversal \u0628\u0647 \u0622\u0646 \u0627\u0634\u0627\u0631\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645. Directory Traversal \u0627\u0632 \u062c\u0645\u0644\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc Server-Side \u06cc\u0627 \u0633\u0645\u062a \u0633\u0631\u0648\u0631 \u0628\u0647 \u0634\u0645\u0627\u0631 \u0645\u06cc\u200c\u0631\u0648\u062f \u0648 \u0648\u062c\u0648\u062f \u0627\u06cc\u0646 \u0628\u0627\u06af\u060c \u0628\u0647 \u0645\u0639\u0646\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0631\u0646\u0627\u0645\u0647 \u062f\u0631 \u0645\u0631\u062d\u0644\u0647\u200c\u06cc Authorization \u06cc\u0627 \u0627\u0639\u0637\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u06cc\u200c\u0628\u0627\u0634\u062f. \u0648\u0642\u062a\u06cc \u06a9\u0647 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u060c \u062f\u0686\u0627\u0631 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0627\u0645\u06a9\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0645\u0633\u06cc\u0631\u200c\u0647\u0627 \u0648 \u067e\u0648\u0634\u0647\u200c\u0647\u0627\u06cc \u0648\u0628\u200c\u0633\u0631\u0648\u0631\u060c \u062f\u0631 \u0633\u0645\u062a \u06a9\u0627\u0631\u0628\u0631 (Client-Side) \u0628\u0647 \u0648\u062c\u0648\u062f \u0645\u06cc\u200c\u0622\u06cc\u062f. \u0628\u0627 \u0627\u06cc\u0646 \u0634\u0631\u0627\u06cc\u0637\u060c \u062f\u0631 \u0635\u0648\u0631\u062a\u06cc \u06a9\u0647 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u0646\u0641\u0648\u0630\u06af\u0631 \u0645\u0648\u0631\u062f \u062d\u0645\u0644\u0647 \u0642\u0631\u0627\u0631 \u0628\u06af\u06cc\u0631\u062f\u060c \u0628\u0647 \u0648\u0627\u0633\u0637\u0647\u200c\u06cc \u0648\u062c\u0648\u062f \u0627\u06cc\u0646 \u0628\u0627\u06af\u060c \u0646\u0641\u0648\u0630\u06af\u0631 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u067e\u0648\u0634\u0647\u200c\u0647\u0627 \u0648 \u0645\u0633\u06cc\u0631 \u0647\u0627\u06cc\u06cc \u0631\u0627 \u067e\u06cc\u062f\u0627 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u06a9\u0647 \u062d\u0627\u0648\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\u06cc \u0645\u0647\u0645 \u0627\u0632 \u0633\u0631\u0648\u0631 \u200c\u0633\u0627\u06cc\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u060c \u0645\u06cc\u200c\u0628\u0627\u0634\u0646\u062f \u0648 \u062f\u0631 \u0628\u0639\u0636\u06cc \u0634\u0631\u0627\u06cc\u0637\u060c \u0646\u0641\u0648\u0630\u06af\u0631 \u0627\u0645\u06a9\u0627\u0646 \u0627\u06cc\u062c\u0627\u062f \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0631 \u0627\u06cc\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0631\u0627 \u0647\u0645 \u062e\u0648\u0627\u0647\u062f \u062f\u0627\u0634\u062a \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0648\u062c\u0628 \u06af\u0631\u0641\u062a\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0645\u0644 \u062a\u0648\u0633\u0637 \u0648\u06cc \u0628\u0634\u0648\u062f. \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0628\u0647 \u0635\u0648\u0631\u062a \u062f\u0642\u06cc\u0642\u200c\u062a\u0631 \u0628\u0647 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0645\u06cc\u200c\u067e\u0631\u062f\u0627\u0632\u06cc\u0645.<\/p>\n<h3><strong><span style=\"font-size: 18pt;\">\u0631\u0648\u0634 \u062d\u0645\u0644\u0647\u200c Directory Traversal<\/span><\/strong><\/h3>\n<p>\u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u0645\u06cc\u200c\u062f\u0627\u0646\u06cc\u062f\u060c \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646\u06a9\u0647 \u0645\u0627 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0631\u0627 \u062f\u0631 \u0645\u0631\u0648\u0631\u06af\u0631\u0645\u0627\u0646 \u0645\u0634\u0627\u0647\u062f\u0647 \u06a9\u0646\u06cc\u0645\u060c \u0627\u0628\u062a\u062f\u0627 \u0645\u0631\u0648\u0631\u06af\u0631\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u06cc \u0628\u0647 \u0633\u0645\u062a \u0633\u0631\u0648\u0631 \u0647\u0645\u0627\u0646 \u0633\u0627\u06cc\u062a \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0633\u067e\u0633 \u0648\u0628 \u0633\u0627\u06cc\u062a \u06af\u0641\u062a\u0647 \u0634\u062f\u0647\u060c \u0628\u0631 \u0627\u0633\u0627\u0633 \u062f\u0633\u062a\u0648\u0631\u0627\u062a\u06cc \u06a9\u0647 \u062a\u0648\u0633\u0637 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633 \u0628\u06a9\u200c\u0627\u0646\u062f(Back end) \u0646\u0648\u0634\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0645\u062d\u062a\u0648\u0627\u06cc \u0645\u0648\u0631\u062f \u0646\u06cc\u0627\u0632 \u0631\u0627 \u062c\u0645\u0639 \u0622\u0648\u0631\u06cc \u0648 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a\u060c \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u06af\u0641\u062a\u0647 \u0634\u062f\u0647\u060c \u062f\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u0628\u0647 \u0646\u0645\u0627\u06cc\u0634 \u062f\u0631 \u0645\u06cc\u200c\u0622\u06cc\u062f. \u0627\u0645\u0627 \u0646\u06a9\u062a\u0647\u200c\u06cc \u0642\u0627\u0628\u0644 \u062a\u0648\u062c\u0647 \u062f\u0631 \u0627\u06cc\u0646 \u0631\u0648\u0646\u062f\u060c \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0646 \u0633\u0627\u06cc\u062a\u200c\u0647\u0627\u060c \u0627\u0632 \u06cc\u06a9 \u0633\u0627\u062e\u062a\u0627\u0631 \u062f\u0631\u062e\u062a\u06cc \u0627\u0632 \u067e\u0648\u0634\u0647\u200c\u0647\u0627(Directories) \u0628\u0631\u0627\u06cc \u062c\u0627\u06af\u0630\u0627\u0631\u06cc \u0648 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0645\u0646\u0628\u0639(Source) \u0628\u0631\u0646\u0627\u0645\u0647 \u0645\u06cc\u200c\u0628\u0627\u0634\u062f.<\/p>\n<p>\u0632\u0645\u0627\u0646\u06cc\u200c\u06a9\u0647 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0631\u0641\u062a\u0646 \u0628\u0647 \u0633\u0627\u06cc\u062a <a href=\"http:\/\/www.example.com\" target=\"_blank\" rel=\"noopener\">www.example.com<\/a> \u0631\u0627 \u062f\u0627\u0631\u062f\u060c \u062f\u0631 \u0648\u0627\u0642\u0639\u060c \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0628\u0631\u0627\u06cc \u0631\u0641\u062a\u0646 \u0628\u0647 \u0645\u0633\u06cc\u0631 \u201c\/\u201d \u060c \u06a9\u0647 \u0627\u0634\u0627\u0631\u0647 \u0628\u0647 \u0645\u0633\u06cc\u0631 \u0631\u06cc\u0634\u0647(Root) \u0628\u0631\u0646\u0627\u0645\u0647\u060c \u06a9\u0647 \u0627\u0634\u0627\u0631\u0647 \u0628\u0647 \u067e\u0648\u0634\u0647\u200c\u06cc \u0627\u0635\u0644\u06cc \u0633\u0627\u06cc\u062a \u062f\u0627\u0631\u062f \u0631\u0627\u060c \u0628\u0647 \u0633\u0631\u0648\u0631 \u0645\u06cc\u200c\u0641\u0631\u0633\u062a\u062f. \u0633\u0631\u0648\u0631 \u0628\u0639\u062f \u0627\u0632 \u062f\u06cc\u062f\u0646 \u0627\u06cc\u0646 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u060c \u0645\u062d\u062a\u0648\u0627\u06cc \u0645\u062e\u0635\u0648\u0635 \u0635\u0641\u062d\u0647\u200c\u06cc \u0627\u0648\u0644 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u0648 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u06a9\u0627\u0631\u0628\u0631\u060c \u062f\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f\u060c \u0633\u0627\u06cc\u062a \u0631\u0627 \u0645\u06cc\u0628\u06cc\u0646\u062f.<\/p>\n<p>\u067e\u0633 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u06af\u0641\u062a \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647\u060c \u06a9\u0627\u0631\u0628\u0631 \u0642\u0635\u062f \u0631\u0641\u062a\u0646 \u0628\u0647 \u0635\u0641\u062d\u0647\u200c\u06cc \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0631\u0627 \u062f\u0627\u0631\u062f\u060c \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u06cc \u0628\u0631\u0627\u06cc \u0631\u0641\u062a\u0646 \u0628\u0647 \u067e\u0648\u0634\u0647 \/product \u0631\u0627 \u0627\u0631\u0633\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0645\u062d\u062a\u0648\u0627\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0645\u062d\u0635\u0648\u0644\u0627\u062a\u060c \u062f\u0631 \u0622\u0646 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.<\/p>\n<p>\u062d\u0627\u0644 \u0641\u0631\u0636 \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u060c \u0645\u062d\u062a\u0648\u0627\u06cc\u06cc \u0631\u0627 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0646\u0645\u0627\u06cc\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u0634\u0627\u0645\u0644 \u0645\u062a\u0646 \u0648 \u062a\u0635\u0627\u0648\u06cc\u0631 \u0645\u06cc\u200c\u0628\u0627\u0634\u062f. \u0627\u06cc\u0646 \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0631\u0627\u06cc \u0628\u0627\u0631\u06af\u06cc\u0631\u06cc \u062a\u0635\u0627\u0648\u06cc\u0631 \u062a\u0648\u0633\u0637 \u0645\u0631\u0648\u0631\u06af\u0631 \u06a9\u0627\u0631\u0628\u0631\u060c \u0627\u0632 \u062a\u06af Image \u0628\u0647 \u0634\u06a9\u0644 \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f:<\/p>\n<pre>&lt;img src=\"\/loadImage?filename=example.png\"&gt;<\/pre>\n<p>\u062f\u0631 \u0627\u06cc\u0646 \u062d\u0627\u0644\u062a\u060c \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0648\u0627\u0631\u062f \u0635\u0641\u062d\u0647\u200c\u06cc \u062f\u0627\u0631\u0627\u06cc \u062a\u06af \u06af\u0641\u062a\u0647 \u0634\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0645\u0631\u0648\u0631\u06af\u0631 \u0628\u0631\u0627\u06cc \u0628\u0627\u0631\u06af\u06cc\u0631\u06cc \u0648 \u0646\u0645\u0627\u06cc\u0634 \u062a\u0635\u0648\u06cc\u0631\u060c \u0633\u0639\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f \u0622\u0646 \u0631\u0627 \u0627\u0632 \u0645\u0633\u06cc\u0631 \/loadImage \u0628\u0627 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 filename \u200c\u0628\u062e\u0648\u0627\u0646\u062f. \u0648\u0628\u200c\u0633\u0631\u0648\u0631 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0628\u0631\u0646\u0627\u0645\u0647\u060c \u0628\u0631\u0627\u06cc \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u06af\u0630\u0627\u0634\u062a\u0646 \u0639\u06a9\u0633 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0634\u062f\u0647\u060c \u0639\u06a9\u0633\u06cc \u0631\u0627 \u06a9\u0647 \u0646\u0627\u0645 \u0622\u0646 \u0628\u0631\u0627\u0628\u0631 \u0628\u0627 \u0645\u0642\u062f\u0627\u0631 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 filename\u060c \u06cc\u0639\u0646\u06cc example.png \u0627\u0633\u062a \u0631\u0627 \u0627\u0632 \u0645\u0633\u06cc\u0631 \/var\/www\/images\/ \u06cc\u0627\u0641\u062a\u0647 \u0648 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f.<\/p>\n<p>\u062d\u0627\u0644 \u0627\u06af\u0631\u060c \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u06af\u0641\u062a\u0647 \u0634\u062f\u0647\u060c \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u062d\u0645\u0644\u0647 Directory Traversal \u0627\u06cc\u0645\u0646 \u0646\u0628\u0627\u0634\u062f\u060c \u0646\u0641\u0648\u0630\u06af\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0633\u06cc\u0631 \u0632\u06cc\u0631\u060c \u0628\u0647 \u0641\u0627\u06cc\u0644\u200c \u0633\u06cc\u0633\u062a\u0645\u06cc passwd\u060c \u062f\u0631 \u0648\u0628\u200c\u0633\u0631\u0648\u0631 \u0633\u0627\u06cc\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f:<\/p>\n<pre>https:\/\/example.com\/loadImage?filename=..\/..\/..\/etc\/passwd<\/pre>\n<p>&nbsp;<\/p>\n<p>\u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u0645\u06cc\u200c\u062f\u0627\u0646\u06cc\u062f\u060c \u0648\u0627\u0631\u062f \u06a9\u0631\u062f\u0646 \u0645\u0642\u062f\u0627\u0631 (..)\u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644\u200c\u0647\u0627\u060c \u0627\u0634\u0627\u0631\u0647 \u0628\u0647 \u0628\u0627\u0632\u06af\u0634\u062a \u0628\u0647 \u067e\u0648\u0634\u0647\u200c\u06cc \u0642\u0628\u0644\u06cc \u062f\u0627\u0631\u062f.<\/p>\n<p><img decoding=\"async\" class=\"wp-image-4188 aligncenter\" src=\"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/mesal-300x224.jpg\" alt=\"\" width=\"751\" height=\"561\" srcset=\"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/mesal-300x224.jpg 300w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/mesal-1024x765.jpg 1024w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/mesal-768x574.jpg 768w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/mesal-1536x1147.jpg 1536w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/mesal-2048x1530.jpg 2048w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/mesal-86x64.jpg 86w\" sizes=\"(max-width: 751px) 100vw, 751px\" \/><\/p>\n<p>\u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u060c \u0639\u06a9\u0633\u06cc \u0631\u0627 \u0627\u0632 \u0648\u0628\u200c\u0633\u0631\u0648\u0631 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0633\u0631\u0648\u0631 \u0627\u0632 \u0645\u0633\u06cc\u0631 &#8220;\/&#8221; \u06a9\u0647 \u0627\u0628\u062a\u062f\u0627\u06cc \u0645\u0633\u06cc\u0631 \u0627\u0633\u062a\u060c \u0648\u0627\u0631\u062f \u0645\u0633\u06cc\u0631 &#8220;\/var\/www\/images\/example.png &#8221; \u0634\u062f\u0647 \u0648 \u0641\u0627\u06cc\u0644 \u0631\u0627 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f. \u0627\u0645\u0627 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0646\u0641\u0648\u0630\u06af\u0631 \u0645\u0633\u06cc\u0631 \u0641\u0627\u06cc\u0644 passwd \u0631\u0627 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0645\u06cc\u200c\u062f\u0647\u062f\u060c \u0633\u0631\u0648\u0631 \u0628\u0647 \u0627\u0632\u0627\u06cc\u00a0 \u0647\u0631 \u062a\u0639\u062f\u0627\u062f ..\/ \u06cc\u06a9 \u067e\u0648\u0634\u0647 \u0628\u0647 \u0639\u0642\u0628 \u0645\u06cc\u200c\u0631\u0648\u062f \u0648 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a\u060c \u0648\u0627\u0631\u062f \u067e\u0648\u0634\u0647 \/etc \u0634\u062f\u0647 \u0648 \u0641\u0627\u06cc\u0644 \u0628\u0633\u06cc\u0627\u0631 \u0645\u0647\u0645 passwd \u0631\u0627\u060c \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0646\u0641\u0648\u0630\u06af\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f:<\/p>\n<pre>\/var\/www\/images\/..\/..\/..\/etc\/passwd<\/pre>\n<p>\u0627\u06cc\u0646 \u0641\u0627\u06cc\u0644 \u062d\u0627\u0648\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\u06cc \u0627\u0632 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0631\u0627 \u062f\u0631\u062e\u0648\u062f \u062c\u0645\u0639 \u0622\u0648\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u0644\u0628\u062a\u0647 \u0645\u0633\u06cc\u0631 \u06af\u0641\u062a\u0647 \u0634\u062f\u0647\u060c \u0645\u0633\u06cc\u0631 \u0641\u0627\u06cc\u0644 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f \u0645\u0648\u062c\u0648\u062f \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0647\u0627\u06cc \u0628\u0631 \u067e\u0627\u06cc\u0647\u200c\u06cc Unix \u0645\u06cc\u200c\u0628\u0627\u0634\u062f.<\/p>\n<p>\u0641\u0627\u06cc\u0644 \u0645\u0639\u0627\u062f\u0644 passwd \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0648\u06cc\u0646\u062f\u0648\u0632\u060c win.ini \u0645\u06cc\u200c\u0628\u0627\u0634\u062f \u06a9\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0622\u0646\u060c \u0627\u0632 \u0645\u0633\u06cc\u0631 C:\\Windows\\win.ini \u0627\u0645\u06a9\u0627\u0646 \u067e\u0630\u06cc\u0631 \u0645\u06cc\u200c\u0628\u0627\u0634\u062f. \u067e\u0633 \u0646\u0641\u0648\u0630\u06af\u0631 \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0647 \u0628\u0647 \u0633\u0627\u06cc\u062a \u062f\u0627\u0631\u0627\u06cc \u0648\u0628\u200c\u0633\u0631\u0648\u0631 \u0628\u0631 \u067e\u0627\u06cc\u0647\u200c\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632\u060c \u0627\u0632 \u0645\u0633\u06cc\u0631 \u0632\u06cc\u0631 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0641\u0627\u06cc\u0644 \u06af\u0641\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f:<\/p>\n<pre>https:\/\/insecure-website.com\/loadImage?filename=..\\..\\..\\windows\\win.ini<\/pre>\n<p>\u062f\u0631 \u0646\u0638\u0631 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f \u06a9\u0647 \u062f\u0631 \u0648\u06cc\u0646\u062f\u0648\u0632\u060c \u067e\u06cc\u0645\u0627\u06cc\u0634 \u0628\u0647 \u067e\u0648\u0634\u0647\u200c\u06cc \u0628\u0627\u0644\u0627\u06cc\u06cc \u0627\u0632 \u0647\u0631 \u062f\u0648 \u062d\u0627\u0644\u062a ..\/ \u0648 ..\\ \u0627\u0645\u06a9\u0627\u0646 \u067e\u0630\u06cc\u0631 \u0627\u0633\u062a.<\/p>\n<h3><span style=\"font-size: 18pt;\"><strong>\u0645\u0633\u06cc\u0631\u200c\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u062a\u0648\u062c\u0647 \u062f\u0631 \u062d\u0645\u0644\u0647 <\/strong><\/span><strong><span style=\"font-size: 18pt;\">Directory Traversal<\/span><\/strong><\/h3>\n<p>\u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u062a\u0627 \u0627\u06cc\u0646\u062c\u0627 \u0645\u062a\u0648\u062c\u0647 \u0634\u062f\u06cc\u0645\u060c \u062f\u0631 \u062d\u0645\u0644\u0647\u200c\u06cc Directory Traversal\u060c \u0628\u06cc\u0634\u062a\u0631 \u0627\u0632 \u0647\u0645\u0647 \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc\u06cc \u0645\u0648\u0631\u062f \u062a\u0648\u062c\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u062f\u0627\u0631\u0627\u06cc \u0645\u062d\u062a\u0648\u0627\u06cc \u0645\u0647\u0645\u06cc \u0645\u06cc\u200c\u0628\u0627\u0634\u0646\u062f. \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0628\u0647 \u0645\u0639\u0631\u0641\u06cc \u0628\u0631\u062e\u06cc \u0627\u0632 \u0645\u0633\u06cc\u0631\u200c\u0647\u0627\u06cc \u0645\u0647\u0645 \u062f\u0631 \u0648\u0628\u200c\u0633\u0631\u0648\u0631\u200c\u0647\u0627\u06cc \u06cc\u0648\u0646\u06cc\u06a9\u0633\u06cc \u0648 \u0648\u06cc\u0646\u062f\u0648\u0632\u06cc \u0645\u06cc\u200c\u067e\u0631\u062f\u0627\u0632\u06cc\u0645:<\/p>\n<h4><strong>\u0645\u062b\u0627\u0644 \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u0645\u0647\u0645 \u062f\u0631 \u0633\u0631\u0648\u0631\u200c\u0647\u0627\u06cc \u06cc\u0648\u0646\u06cc\u06a9\u0633\u06cc:<\/strong><\/h4>\n<pre style=\"text-align: left;\">\/etc\/shadow \r\n\/etc\/passwd\r\n\/etc\/httpd\/logs\/access.log\r\n\/usr\/lib\/php.ini\r\n\/usr\/local\/cpanel\/logs\r\n\/var\/log\/mysql.log\r\n\/etc\/apache2\/httpd.conf\r\n<\/pre>\n<p>&nbsp;<\/p>\n<h4><strong>\u0645\u062b\u0627\u0644 \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u0645\u0647\u0645 \u062f\u0631 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632\u06cc:<\/strong><\/h4>\n<pre>C:\/Windows\/win.ini \r\nC:\/php\/php.ini\r\nC:\/WINDOWS\/System32\/drivers\/etc\/hosts\r\nC:\/Windows\/debug\/NetSetup.log \r\nC:\/Program Files\/MySQL\/data\/mysql.log\r\nC:\/Program Files\/FileZilla Server\/FileZilla Server.xml\r\nC:\/Program Files\/Apache Group\/Apache2\/conf\/httpd.conf\r\nC:\/Program Files\/Apache Group\/Apache\/logs\/access.log<\/pre>\n<p>\u0627\u0644\u0628\u062a\u0647 \u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u0627\u0634\u0627\u0631\u0647 \u0634\u062f\u060c \u0627\u06cc\u0646 \u0647\u0627 \u0641\u0642\u0637 \u0628\u0631\u062e\u06cc \u0627\u0632 \u0645\u0633\u06cc\u0631\u200c\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u062a\u0648\u062c\u0647 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0645\u06cc\u200c\u0628\u0627\u0634\u0646\u062f\u061b \u0645\u0633\u06cc\u0631\u200c\u0647\u0627\u06cc \u0632\u06cc\u0627\u062f\u06cc \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644\u200c\u0647\u0627 \u0647\u0633\u062a\u0646\u062f \u06a9\u0647 \u0634\u0627\u0645\u0644 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06cc\u0627 \u06a9\u0627\u0631\u0628\u0631\u062f \u0645\u0647\u0645\u06cc \u0645\u06cc\u200c\u0628\u0627\u0634\u0646\u062f.<\/p>\n<h3><strong><span style=\"font-size: 18pt;\">\u062a\u0633\u062a\u200c \u0646\u0641\u0648\u0630 \u062f\u0631 \u062d\u0645\u0644\u0647 Directory Traversal<\/span><\/strong><\/h3>\n<p>\u0628\u0631\u0627\u06cc <a href=\"https:\/\/www.irandnn.ir\/%D8%B1%D8%A7%D9%87%DA%A9%D8%A7%D8%B1%D9%87%D8%A7\/%D8%A7%D8%B1%D8%B2%DB%8C%D8%A7%D8%A8%DB%8C-%D9%88-%D8%A2%D8%B2%D9%85%D9%88%D9%86-%D9%86%D9%81%D9%88%D8%B0-%D8%B3%D8%A7%D9%85%D8%A7%D9%86%D9%87-%D9%87%D8%A7\">\u062a\u0633\u062a \u0646\u0641\u0648\u0630<\/a> \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u060c \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u06a9\u0647 \u0645\u0633\u06cc\u0631\u200c\u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641\u06cc \u06a9\u0647 \u0628\u0627 \u0633\u0648\u0631\u0633 \u0628\u0631\u0646\u0627\u0645\u0647 \u062f\u0631 \u0627\u0631\u062a\u0628\u0627\u0637 \u0647\u0633\u062a\u0646\u062f \u0645\u0648\u0631\u062f \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0642\u0631\u0627\u0631 \u0628\u06af\u06cc\u0631\u0646\u062f. \u0627\u06cc\u0646 \u0645\u0633\u06cc\u0631 \u0647\u0627 \u0639\u0628\u0627\u0631\u062a\u0646\u062f \u0627\u0632:<\/p>\n<h4><strong>\u0627\u0632 \u0637\u0631\u06cc\u0642 \u062f\u0631\u062e\u0648\u0627\u0633\u062a<\/strong><\/h4>\n<p>\u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641\u06cc \u062f\u0631 url\u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0645\u0633\u06cc\u0631 \u0646\u0641\u0648\u0630 \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0647\u200c\u06cc directory traversal \u0628\u0627\u0634\u0646\u062f. \u067e\u0627\u0631\u0627\u0645\u062a\u0631\u200c\u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06cc\u06a9 \u0635\u0641\u062d\u0647\u060c \u06cc\u06a9 \u0641\u0627\u06cc\u0644\u060c \u06cc\u06a9 \u067e\u0646\u0644 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648&#8230; \u06a9\u0647 \u0628\u0627\u06cc\u062f \u0628\u0647 \u062f\u0631\u0633\u062a\u06cc \u0645\u0648\u0631\u062f \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0642\u0631\u0627\u0631 \u0628\u06af\u06cc\u0631\u0646\u062f. \u0628\u0647 \u0645\u062b\u0627\u0644 \u0647\u0627\u06cc \u0645\u0642\u0627\u0628\u0644 \u062a\u0648\u062c\u0647 \u06a9\u0646\u06cc\u062f:<\/p>\n<pre>http:\/\/example.com\/getUserProfile.jsp?item=ikki.html\r\nhttp:\/\/example.com\/index.php?file=content\r\nhttp:\/\/example.com\/main.cgi?home=index.htm<\/pre>\n<p>\u0628\u0631\u0627\u06cc \u062a\u0633\u062a \u0622\u0646\u0647\u0627 \u0647\u0645 \u06a9\u0627\u0641\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0645\u0642\u062f\u0627\u0631 \u062f\u0627\u062e\u0644 \u067e\u0627\u0631\u0627\u0645\u062a\u0631\u200c\u0647\u0627 \u0631\u0627 \u0628\u0647 \u0645\u0633\u06cc\u0631\u200c\u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0633\u0631\u0648\u0631\u060c \u062a\u063a\u06cc\u06cc\u0631 \u0628\u062f\u0647\u06cc\u0645. \u0645\u0627\u0646\u0646\u062f ..\/..\/etc\/passwd \u00a0\u06cc\u0627 \u00a0..\/..\/windows\/win.ini .\u0647\u0645\u0686\u0646\u06cc\u0646 \u0645\u0627\u0646\u0646\u062f \u0645\u062b\u0627\u0644 \u06af\u0641\u062a\u0647 \u0634\u062f\u0647\u060c \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0645\u062a\u0648\u062c\u0647 \u06cc\u06a9 \u0645\u0633\u06cc\u0631\u060c \u062f\u0631 \u06a9\u062f html \u0633\u0627\u06cc\u062a \u0628\u0631\u0627\u06cc \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u0628\u0634\u0648\u06cc\u0645 \u06a9\u0647 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a\u060c \u0622\u0646 \u0631\u0627 \u0647\u0645 \u0645\u0648\u0631\u062f \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0642\u0631\u0627\u0631 \u0628\u062f\u0647\u06cc\u0645.<\/p>\n<p>\u062f\u0631 \u0635\u0648\u0631\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0628\u0648\u062f\u0646 \u0628\u0631\u0646\u0627\u0645\u0647\u060c \u0627\u062d\u062a\u0645\u0627\u0644\u0627 \u0628\u0627 \u062a\u0635\u0648\u06cc\u0631\u06cc \u0634\u0628\u06cc\u0647 \u0628\u0647 \u0632\u06cc\u0631 \u0645\u0648\u0627\u062c\u0647 \u0645\u06cc\u200c\u0634\u0648\u06cc\u062f:<\/p>\n<p><img decoding=\"async\" class=\"wp-image-4189 aligncenter\" src=\"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/image2-300x75.png\" alt=\"\" width=\"840\" height=\"210\" srcset=\"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/image2-300x75.png 300w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/image2-768x192.png 768w, https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/image2.png 778w\" sizes=\"(max-width: 840px) 100vw, 840px\" \/><\/p>\n<h4><strong>\u0627\u0632 \u0637\u0631\u06cc\u0642 \u06a9\u0648\u06a9\u06cc \u0647\u0627<\/strong><\/h4>\n<p>\u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631\u0646\u0627\u0645\u0647 \u0627\u0632 \u06a9\u0648\u06a9\u06cc\u200c\u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641\u06cc \u0628\u0631\u0627\u06cc \u0628\u0631\u0642\u0631\u0627\u0631\u06cc \u0627\u0631\u062a\u0628\u0627\u0637 \u0628\u0627 \u06a9\u0627\u0631\u0628\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u0646\u0645\u0627\u06cc\u062f \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0635\u0648\u0631\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0647 directory traversal\u060c \u06cc\u06a9\u06cc \u0627\u0632 \u0647\u0645\u06cc\u0646 \u06a9\u0648\u06a9\u06cc\u200c\u0647\u0627\u060c \u062a\u0628\u062f\u06cc\u0644 \u0628\u0647 \u062d\u0641\u0631\u0647 \u0627\u06cc \u0628\u0631\u0627\u06cc \u062a\u0632\u0631\u06cc\u0642 \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u0633\u0631\u0648\u0631 \u0648 \u0628\u06cc\u0631\u0648\u0646 \u06a9\u0634\u06cc\u062f\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0622\u0646 \u0628\u0634\u0648\u062f. \u067e\u0633 \u062f\u0631 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a\u060c \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u06a9\u0647 \u06a9\u0648\u06a9\u06cc\u200c\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0645\u062f\u0646\u0638\u0631 \u0631\u0627 \u0647\u0645 \u0645\u0648\u0631\u062f \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0642\u0631\u0627\u0631 \u0628\u062f\u0647\u06cc\u0645:<\/p>\n<pre>Cookie: USER=1826cc8f:PSTYLE=exampleValue\r\nCookie: USER=1826cc8f:PSTYLE=..\/..\/..\/etc\/passwd<\/pre>\n<p>&nbsp;<\/p>\n<h3><span style=\"font-size: 18pt;\"><strong>\u0627\u0628\u0632\u0627\u0631\u200c\u0647\u0627\u06cc \u062a\u0633\u062a Directory Traversal<\/strong><\/span><\/h3>\n<p>\u062f\u0631 \u0646\u0638\u0631 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f \u06a9\u0647 \u062a\u0633\u062a \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u060c \u0628\u062f\u0648\u0646 \u0627\u0628\u0632\u0627\u0631 \u0648 \u0628\u0635\u0648\u0631\u062a \u062f\u0633\u062a\u06cc \u0647\u0645 \u0642\u0627\u0628\u0644 \u0627\u0646\u062c\u0627\u0645 \u0627\u0633\u062a. \u0627\u0645\u0627 \u0628\u0631\u0627\u06cc \u062f\u0642\u062a \u0648 \u0633\u0631\u0639\u062a \u0628\u06cc\u0634\u062a\u0631\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631 \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a \u0622\u0646\u0627\u0644\u06cc\u0632 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627 \u0631\u0627 \u062f\u0627\u0631\u0646\u062f\u060c \u0628\u0631\u0627\u06cc \u06cc\u0627\u0641\u062a\u0646 \u0648\u0631\u0648\u062f\u06cc\u200c\u0647\u0627\u06cc \u0645\u062f\u0646\u0638\u0631 \u0628\u0631\u0627\u06cc \u062a\u0633\u062a\u060c \u0648 \u0627\u0628\u0632\u0627\u0631\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a \u0628\u0631\u0648\u062a \u0641\u0648\u0631\u0633 \u062f\u0627\u0631\u0646\u062f\u060c \u0628\u0631\u0627\u06cc \u062a\u0633\u062a \u0627\u062a\u0648\u0645\u0627\u062a\u06cc\u06a9 \u0627\u0646\u0648\u0627\u0639 \u0645\u0633\u06cc\u0631 \u0647\u0627 \u0631\u0648\u06cc \u0648\u0631\u0648\u062f\u06cc \u0647\u0627\u06cc \u0645\u062f\u0646\u0638\u0631\u060c \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0645\u0648\u062f. \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc\u06cc \u0627\u0632 \u0627\u0628\u0632\u0627\u0631 \u0647\u0627\u06cc \u0645\u0641\u06cc\u062f \u0628\u0631\u0627\u06cc \u062a\u0633\u062a \u0627\u06cc\u0646 \u0628\u0627\u06af \u0639\u0628\u0627\u0631\u062a\u0646\u062f \u0627\u0632:<\/p>\n<ul class=\"bs-shortcode-list list-style-star\">\n<li><strong>Burp Suite<\/strong><\/li>\n<\/ul>\n<ul class=\"bs-shortcode-list list-style-star\">\n<li><strong>DotDotPwn<\/strong><\/li>\n<\/ul>\n<ul class=\"bs-shortcode-list list-style-star\">\n<li><strong>DirSearch<\/strong><\/li>\n<\/ul>\n<h3><span style=\"font-size: 18pt;\"><strong>\u0628\u0627\u06cc\u067e\u0633 \u0633\u06cc\u0633\u062a\u0645 \u0627\u0645\u0646\u06cc\u062a\u06cc<\/strong><\/span><\/h3>\n<p>\u0627\u06af\u0631 \u0647\u0646\u06af\u0627\u0645 \u062a\u0633\u062a \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647\u060c \u0628\u0639\u062f \u0627\u0632 \u062a\u0632\u0631\u06cc\u0642 \u067e\u06cc\u0644\u0648\u062f\u200c\u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637\u0647\u060c \u0646\u062a\u06cc\u062c\u0647\u200c\u0627\u06cc \u062d\u0627\u0635\u0644 \u0646\u0634\u062f\u060c \u0646\u0634\u0627\u0646 \u0627\u0632 \u0627\u0645\u0646\u06cc\u062a \u06a9\u0627\u0645\u0644 \u0628\u0631\u0646\u0627\u0645\u0647 \u0646\u0645\u06cc\u200c\u0628\u0627\u0634\u062f. \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631\u0646\u0627\u0645\u0647\u060c \u0648\u0631\u0648\u062f\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u0628\u0631 \u0627\u0633\u0627\u0633 \u06cc\u06a9 \u0628\u0644\u0627\u06a9 \u0644\u06cc\u0633\u062a (Block-List) \u00a0\u0645\u0648\u0631\u062f \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0642\u0631\u0627\u0631 \u062f\u0647\u062f \u0648 \u062f\u0631 \u0635\u0648\u0631\u062a \u0639\u062f\u0645 \u0634\u0628\u0627\u0647\u062a \u0645\u0633\u06cc\u0631 \u0648\u0627\u0631\u062f \u0634\u062f\u0647\u060c \u0622\u0646\u0631\u0627 \u067e\u0631\u062f\u0627\u0632\u0634 \u06a9\u0631\u062f\u0647 \u0648 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u062f\u0646\u0638\u0631 \u0631\u0627 \u062a\u062d\u0648\u06cc\u0644 \u062f\u0647\u062f.<\/p>\n<p>\u0628\u0647 \u0627\u06cc\u0646 \u0645\u0646\u0638\u0648\u0631\u060c \u0628\u0631\u0627\u06cc \u062a\u0633\u062a \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647\u060c \u062a\u0632\u0631\u06cc\u0642 \u067e\u06cc\u0644\u0648\u062f\u0647\u0627\u060c \u0628\u0647 \u0634\u06a9\u0644 \u0632\u06cc\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0641\u06cc\u062f \u0628\u0627\u0634\u062f:<\/p>\n<h4><strong>URL Encoding<\/strong><\/h4>\n<p>\u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0627 \u0631\u0648\u0634 URL Encode \u06cc\u0627 Double encoding\u060c \u067e\u06cc\u0644\u0648\u062f \u062a\u0632\u0631\u06cc\u0642 \u0634\u062f\u0647 \u062a\u0648\u0633\u0637 \u0628\u0631\u0646\u0627\u0645\u0647 \u062a\u0634\u062e\u06cc\u0635 \u062f\u0627\u062f\u0647 \u0646\u0634\u062f\u0647 \u0648 \u067e\u0631\u062f\u0627\u0632\u0634 \u0628\u0634\u0648\u062f. \u0645\u062b\u0644\u0627 \u0628\u0647 \u062c\u0627\u06cc ..\/ \u06cc\u0627 ..\\ \u060c\u0645\u0642\u0627\u062f\u06cc\u0631 \u0632\u06cc\u0631 \u0631\u0627 \u0648\u0627\u0631\u062f \u06a9\u0646\u06cc\u0645.<\/p>\n<pre style=\"text-align: left;\">..\/\r\n%2e%2e\/\r\n..%2f\r\n%2e%2e%2f<\/pre>\n<pre style=\"text-align: left;\">..\\\r\n%2e%2e\\\r\n..%5c\r\n%2e%2e%5c<\/pre>\n<p>&nbsp;<\/p>\n<h4><strong>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0639\u0644\u0627\u0645\u0627\u062a<\/strong><\/h4>\n<p>\u0628\u0639\u0636\u06cc \u0627\u0632 \u0646\u0634\u0627\u0646\u06af\u0631\u0647\u0627 \u062f\u0631 \u0646\u0648\u0634\u062a\u0646 \u0645\u0633\u06cc\u0631 \u062a\u0627\u062b\u06cc\u0631 \u06af\u0630\u0627\u0631 \u0646\u06cc\u0633\u062a\u0646\u062f \u0648 \u062a\u0648\u0633\u0637 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u062f\u0631 \u0646\u0638\u0631 \u06af\u0631\u0641\u062a\u0647 \u0646\u0634\u062f\u0647 \u0648 \u067e\u0627\u06a9 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0627\u0645\u0627 \u0628\u0631\u0627\u06cc \u06af\u0630\u0631\u0627\u0646\u062f\u0646 \u067e\u06cc\u0644\u0648\u062f \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0648 \u0631\u0641\u062a\u0646 \u0628\u0647 \u0645\u0633\u06cc\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0645\u0641\u06cc\u062f \u0628\u0627\u0634\u0646\u062f:<\/p>\n<pre>..\/..\/file.txt&lt;SPACE&gt;\r\n..\/..\/file.txt\u201d\u201d\u201d\u201d\r\n..\/..\/file.txt&lt;&lt;&lt;&gt;&gt;&gt;&lt;\r\n..\/..\/file.txt\u2026<\/pre>\n<h4><strong>\u062a\u063a\u06cc\u06cc\u0631 \u0634\u06a9\u0644 \u0645\u0633\u06cc\u0631<br \/>\n<\/strong><\/h4>\n<p>\u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0631\u0646\u0627\u0645\u0647 \u0641\u0642\u0637 \u0627\u0632 \u0645\u0642\u0627\u062f\u06cc\u0631\u06cc \u06a9\u0647 \u0627\u0628\u062a\u062f\u0627\u06cc \u0622\u0646 \u0627\u0632 ..\/ \u06cc\u0627 ..\\ \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u06a9\u0646\u062f\u061b \u062f\u0631 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a \u0646\u0648\u0634\u062a\u0646 \u0645\u0633\u06cc\u0631 \u0628\u0647 \u0635\u0648\u0631\u062a\u06cc \u06a9\u0647 \u0645\u0634\u0627\u0628\u0647 \u0622\u0646 \u0646\u0628\u0627\u0634\u062f \u0648\u0644\u06cc \u0639\u0645\u0644\u06a9\u0631\u062f \u0645\u062f\u0646\u0638\u0631 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u0627 \u0627\u0646\u062c\u0627\u0645 \u0628\u062f\u0647\u062f\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0648\u062c\u0628 \u0628\u0627\u06cc\u067e\u0633 \u0634\u062f\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0634\u0648\u062f:<\/p>\n<pre>file=&lt;SPACE&gt;..\\..\\file.txt\r\nfile=\u2026.\\\\....\\\\file.txt\r\nfile=.\/.\/.\/file.txt\r\nfile=nonexistent\/..\/file.txt<\/pre>\n<h3><span style=\"font-size: 18pt;\"><strong>\u0627\u0645\u0646\u06cc\u062a \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u062d\u0645\u0644\u0647 Directory Traversal<\/strong><\/span><\/h3>\n<p>\u0628\u0631\u0627\u06cc \u0627\u0645\u0646 \u0633\u0627\u0632\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u060c \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647\u060c \u062f\u0648 \u06af\u0632\u06cc\u0646\u0647\u200c\u06cc \u0632\u06cc\u0631 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f:<\/p>\n<ul>\n<li><span style=\"font-size: 10pt;\"><strong>\u0627\u0639\u062a\u0628\u0627\u0631 \u0633\u0646\u062c\u06cc \u0648\u0631\u0648\u062f\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631<\/strong><\/span><\/li>\n<\/ul>\n<p>\u0648\u0631\u0648\u062f\u06cc\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u0632 \u0633\u0645\u062a \u06a9\u0627\u0631\u0628\u0631 \u0628\u0647 \u0633\u0645\u062a \u0628\u0631\u0646\u0627\u0645\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0645\u06cc\u200c\u0634\u0648\u0646\u062f\u060c \u0637\u0628\u0642 \u06cc\u06a9 \u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f(White List) \u0627\u0632 \u0645\u0642\u0627\u062f\u06cc\u0631 \u0645\u062c\u0627\u0632\u060c \u0645\u0648\u0631\u062f \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0642\u0631\u0627\u0631 \u0628\u06af\u06cc\u0631\u0646\u062f \u062a\u0627 \u0645\u0642\u0627\u062f\u06cc\u0631 \u0648\u0631\u0648\u062f\u06cc \u06a9\u0627\u0631\u0628\u0631\u060c \u0628\u0647 \u0645\u0642\u0627\u062f\u06cc\u0631 \u0627\u0635\u0644\u06cc \u0628\u0631\u0646\u0627\u0645\u0647 \u0645\u062d\u062f\u0648\u062f \u0628\u0634\u0648\u0646\u062f\u061b \u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644\u060c \u0628\u0631\u0646\u0627\u0645\u0647 \u0628\u0647 \u063a\u06cc\u0631 \u0627\u0632 \u0645\u0642\u0627\u062f\u06cc\u0631 \u0639\u062f\u062f\u06cc\u060c \u0648\u0631\u0648\u062f\u06cc\u200c\u0647\u0627\u06cc \u062f\u06cc\u06af\u0631 \u0631\u0627 \u067e\u0631\u062f\u0627\u0632\u0634 \u0646\u06a9\u0646\u062f.<\/p>\n<ul>\n<li><span style=\"font-size: 10pt;\"><strong>\u0631\u0639\u0627\u06cc\u062a \u0627\u0635\u0644 \u062d\u062f\u0627\u0642\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc (Least Privilege)<\/strong><\/span><\/li>\n<\/ul>\n<p>\u0628\u0631\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a \u0628\u06cc\u0634\u062a\u0631 \u0648\u0628\u200c\u0633\u0631\u0648\u0631\u060c \u062f\u0642\u062a \u0634\u0648\u062f \u06a9\u0647 \u0641\u0642\u0637 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u0636\u0631\u0648\u0631\u06cc \u0648 \u0645\u0648\u0631\u062f \u0646\u06cc\u0627\u0632 \u0628\u0631\u0646\u0627\u0645\u0647\u060c \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u0639\u0637\u0627\u0621 \u0628\u0634\u0648\u062f\u060c \u062a\u0627 \u0627\u0632 \u0627\u062d\u062a\u0645\u0627\u0644 \u062d\u0645\u0644\u0647 \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0646\u0641\u0648\u0630\u06af\u0631\u0627\u0646\u060c \u062f\u0631 \u0627\u0645\u0627\u0646 \u0628\u0627\u0634\u062f.<\/p>\n<p><span style=\"font-size: 18pt;\"><strong>\u062c\u0645\u0639 \u0628\u0646\u062f\u06cc<\/strong><\/span><\/p>\n<p>\u0633\u0639\u06cc \u0634\u062f \u062a\u0627 \u062f\u0631 \u0627\u06cc\u0646 \u0646\u0648\u0634\u062a\u0627\u0631 \u0628\u0647 \u0637\u0648\u0631 \u06a9\u0627\u0645\u0644 \u0628\u0627 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Directory Traversal\u060c \u0627\u0632 \u062f\u06cc\u062f \u0646\u0641\u0648\u0630 \u0648 \u0627\u0645\u0646\u06cc\u062a \u0628\u0647 \u0637\u0648\u0631 \u06a9\u0627\u0645\u0644 \u067e\u0631\u062f\u0627\u062e\u062a\u0647 \u0648 \u0627\u0647\u0645\u06cc\u062a \u0622\u0646 \u0631\u0633\u0627\u0646\u062f\u0647 \u0628\u0634\u0648\u062f. \u0686\u0631\u0627 \u06a9\u0647 \u062f\u0631 \u0635\u0648\u0631\u062a \u0646\u0627\u062f\u06cc\u062f\u0647 \u06af\u0631\u0641\u062a\u0646 \u0622\u0646\u060c \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u062e\u0648\u062f\u06cc \u062e\u0648\u062f\u060c \u062a\u0628\u062f\u06cc\u0644 \u0628\u0647 \u067e\u0644\u0647\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u0628\u0647 \u062e\u0637\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u06cc\u06a9 \u0633\u0627\u0645\u0627\u0646\u0647 \u0628\u0634\u0648\u062f.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p><span class=\"span-reading-time rt-reading-time\" style=\"display: block;\"><span class=\"rt-label rt-prefix\">\u0632\u0645\u0627\u0646 \u0645\u0637\u0627\u0644\u0639\u0647:<\/span> <span class=\"rt-time\"> 6<\/span> <span class=\"rt-label rt-postfix\">\u062f\u0642\u06cc\u0642\u0647<\/span><\/span>Directory Traversal \u0627\u0632 \u062c\u0645\u0644\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc Server-Side \u06cc\u0627 \u0633\u0645\u062a \u0633\u0631\u0648\u0631 \u0628\u0647 \u0634\u0645\u0627\u0631 \u0645\u06cc\u200c\u0631\u0648\u062f \u0648 \u0648\u062c\u0648\u062f \u0627\u06cc\u0646 \u0628\u0627\u06af\u060c \u0628\u0647 \u0645\u0639\u0646\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0631\u0646\u0627\u0645\u0647 \u062f\u0631 \u0645\u0631\u062d\u0644\u0647\u200c\u06cc Authorization \u06cc\u0627 \u0627\u0639\u0637\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u06cc\u200c\u0628\u0627\u0634\u062f. \u0648\u0642\u062a\u06cc \u06a9\u0647 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u060c \u062f\u0686\u0627\u0631 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0627\u0645\u06a9\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0645\u0633\u06cc\u0631\u200c\u0647\u0627 \u0648 \u067e\u0648\u0634\u0647\u200c\u0647\u0627\u06cc \u0648\u0628\u200c\u0633\u0631\u0648\u0631\u060c \u062f\u0631 \u0633\u0645\u062a \u06a9\u0627\u0631\u0628\u0631 (Client-Side) \u0628\u0647 \u0648\u062c\u0648\u062f \u0645\u06cc\u200c\u0622\u06cc\u062f.<\/p>\n","protected":false},"author":5,"featured_media":4187,"comment_status":"open","ping_status":"open","sticky":true,"template":"","format":"standard","meta":{"footnotes":""},"categories":[75],"tags":[76],"better_featured_image":{"id":4187,"alt_text":"","caption":"","description":"","media_type":"image","media_details":{"width":1000,"height":638,"file":"2021\/10\/shakhes.jpg","sizes":{"medium":{"file":"shakhes-300x191.jpg","width":300,"height":191,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/shakhes-300x191.jpg"},"thumbnail":{"file":"shakhes-150x150.jpg","width":150,"height":150,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/shakhes-150x150.jpg"},"medium_large":{"file":"shakhes-768x490.jpg","width":768,"height":490,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/shakhes-768x490.jpg"},"publisher-tb1":{"file":"shakhes-86x64.jpg","width":86,"height":64,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/shakhes-86x64.jpg"},"publisher-sm":{"file":"shakhes-210x136.jpg","width":210,"height":136,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/shakhes-210x136.jpg"},"publisher-mg2":{"file":"shakhes-279x220.jpg","width":279,"height":220,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/shakhes-279x220.jpg"},"publisher-md":{"file":"shakhes-357x210.jpg","width":357,"height":210,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/shakhes-357x210.jpg"},"publisher-lg":{"file":"shakhes-750x430.jpg","width":750,"height":430,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/shakhes-750x430.jpg"},"publisher-full":{"file":"shakhes-1000x580.jpg","width":1000,"height":580,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/shakhes-1000x580.jpg"},"publisher-tall-sm":{"file":"shakhes-180x217.jpg","width":180,"height":217,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/shakhes-180x217.jpg"},"publisher-tall-lg":{"file":"shakhes-267x322.jpg","width":267,"height":322,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/shakhes-267x322.jpg"},"publisher-tall-big":{"file":"shakhes-368x445.jpg","width":368,"height":445,"mime-type":"image\/jpeg","source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/shakhes-368x445.jpg"}},"image_meta":{"aperture":"0","credit":"","camera":"","caption":"","created_timestamp":"0","copyright":"","focal_length":"0","iso":"0","shutter_speed":"0","title":"","orientation":"1","keywords":[]}},"post":4186,"source_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/shakhes.jpg"},"fimg_url":"https:\/\/www.irandnn.ir\/mag\/wp-content\/uploads\/2021\/10\/shakhes.jpg","_links":{"self":[{"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/posts\/4186"}],"collection":[{"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/comments?post=4186"}],"version-history":[{"count":13,"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/posts\/4186\/revisions"}],"predecessor-version":[{"id":5256,"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/posts\/4186\/revisions\/5256"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/media\/4187"}],"wp:attachment":[{"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/media?parent=4186"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/categories?post=4186"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.irandnn.ir\/mag\/wp-json\/wp\/v2\/tags?post=4186"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}