title: Using directory traversal attack to execute commands
body: <p>Is there a way to execute commands using directory traversal attacks?</p>
  
  <p>For instance, I access a server's <code>etc/passwd</code> file like this</p>
  
  <pre><code>http://server.com/..%01/..%01/..%01//etc/passwd
  </code></pre>
  
  <p>Is there a way to run a command instead? Like...</p>
  
  <pre><code>http://server.com/..%01/..%01/..%01//ls
  </code></pre>
  
  <p>..... and get an output?</p>
  
  <p>To be clear here, I've found the vuln in our company's server. I'm looking to raise the risk level (or bonus points for me) by proving that it may give an attacker complete access to the system</p>