File Upload 4 | Web Shell Upload via Extension Blacklist Bypass
Steps to solve:
1. Login as wiener.
2. Upload a torhat.php . Intercept and send to repeater.
3. Change the filename's value to ".htaccess" and Content-Type to text/plain
And actual content of the file to:
AddType application/x-httpd-php .torhat
Send that request.
4. Upload torhat.php , intercept and send to repeater.
5. Change filename to torhat.torhat . ContrntType to image/png
Send the request.
6. Go to website.com/files/avatars/torhat.torhat
This video is for Educational purposes only.
https://portswigger.net/web-security/...
https://portswigger.net/web-security/...
Want me to train you for Practical courses and Global Certifications? or
Want to hire me or our students for VAPT or SOC?
Email: [email protected]
Thank you for your awesome support:
https://buymeacoffee.com/TORHAT
Paytm: https://tinyurl.com/TORHAT
Socials:
Whatsapp: https://chat.whatsapp.com/JEWGrpUOqXx...
Linkedin: / mukesh-pyda
Twitter: / @oxtorhat
Telegram Group: https://t.me/+a9nwT9mdgeJhMDA1
Discord: / discord
Email: [email protected]
#TORHAT #portswigger #Cybersecurity #EthicalHacking #HackingLab #SecurityChallenge #CTF (Capture The Flag) #Infosec #WebSecurity #CyberChallenge #BugBounty #CaptureTheFlag #HackingChallenge #HackMe #SecurityTraining #password #fileupload #DebugPage #bugbounty #bugbountyhunter #bugbountytips #bugbounty #bugbountyhunter #bugbountytips