File upload 6 | Remote Code Execution via Polyglot Web Shell Upload
Steps to solve:
1. Login as wiener.
2. Upload a torhat.php . Intercept and send to repeater.
3. Download a random image, and run exiftool Comment command as shown in the video.
4. Upload the image which had the extension php.
5. Go to website.com/files/avatars/torhat.php
This video is for Educational purposes only.
https://portswigger.net/web-security/...
https://portswigger.net/web-security/...
Want me to train you for Practical courses and Global Certifications? or
Want to hire me or our students for VAPT or SOC?
Email: [email protected]
Thank you for your awesome support:
https://buymeacoffee.com/TORHAT
Paytm: https://tinyurl.com/TORHAT
Socials:
Whatsapp: https://chat.whatsapp.com/JEWGrpUOqXx...
Linkedin: / mukesh-pyda
Twitter: / @oxtorhat
Telegram Group: https://t.me/+a9nwT9mdgeJhMDA1
Discord: / discord
Email: [email protected]
#TORHAT #portswigger #Cybersecurity #EthicalHacking #HackingLab #SecurityChallenge #CTF (Capture The Flag) #Infosec #WebSecurity #CyberChallenge #BugBounty #CaptureTheFlag #HackingChallenge #HackMe #SecurityTraining #password #fileupload #DebugPage #bugbounty #bugbountyhunter #bugbountytips #bugbounty #bugbountyhunter #bugbountytips