# DocVault — Directory Traversal (CTF challenge)

> DocVault is a company document viewer that opens files with /view?file= . It reads whatever path you give it, straight from a base folder, with no checks.

Canonical: https://codelivly.com/ctf/challenges/docvault-traversal

| | |
|---|---|
| Category | Web Exploitation |
| Difficulty | Medium |
| Points | 350 |
| Estimated time | 20 min |
| Type | Live instance |
| Solves | 28 |
| Author | Codelivly |

DocVault is a company document viewer that opens files with /view?file=. It reads whatever path you give it, straight from a base folder, with no checks. A private admin note lives outside that folder. Escape the documents directory and read it.

## Related

- [All CTF challenges](https://codelivly.com/practice?type=ctf)