Web Shell Upload via Path Traversal
👩🎓👨🎓 Learn about File Upload vulnerabilities. This lab's server is configured to prevent execution of user-supplied files, but this restriction can be bypassed by exploiting a secondary vulnerability. To solve the lab, we'll upload a basic PHP web shell and use it to exfiltrate the contents of a "secret" file.
Overview:
0:00 Intro
0:12 Background: File upload vulnerabilities
0:33 Background: Preventing file execution in user-accessible directories
1:31 Challenge info
2:03 Upload standard PHP webshell
2:43 Path traversal
3:41 Filter bypass
6:00 Remediations
7:18 Conclusion
For more information, check out https://blog.intigriti.com/hackademy/...
🔗 @PortSwiggerTV challenge: https://portswigger.net/web-security/...
🧑💻 Sign up and start hacking right now - https://go.intigriti.com/register
👾 Join our Discord - https://go.intigriti.com/discord
🎙️ This show is hosted by / _cryptocat ( @_CryptoCat ) & / intigriti
👕 Do you want some Intigriti Swag? Check out https://swag.intigriti.com