Oct 15, 2025 · 8 min read · So far, we have been mainly dealing with filter bypasses to obtain arbitrary file uploads through a vulnerable web application, which is the main focus of this module at this level. While file upload forms with weak filters can be exploited to upload...
Join discussionSep 7, 2025 · 7 min read · Recently, I was reading a blog titled “Don’t Fear The AI Reaper: Using LLMs to Hack Better and Faster” which was explaining how hackers can hack better with the help of AI. The blog talked about how AI can often generate vulnerable code, and it linke...
Join discussion
Aug 12, 2025 · 18 min read · What are file upload vulnerabilities? File upload vulnerabilities are when a web server allows users to upload file to its filesystem without sufficiently validating things like their name, type, contents, or size. Failing to properly enforce restric...
Join discussionJul 14, 2025 · 5 min read · Scenario You are contracted to perform a penetration test for a company's e-commerce web application. The web application is in its early stages, so you will only be testing any file upload forms you can find. Try to utilize what you learned in this ...
Join discussion
Jun 7, 2025 · 7 min read · 2024년에 나온 구글에서 Florida 대학교와 협업하여 작성한 논문입니다. Node.js 환경에서 파일 업로드 시 발생할 수 있는 취약점 13가지를 열거하고, 상용중인 유명 파일 업로드 라이브러리들이 이 취약점에 얼마나 해당되는지를 분석한 논문입니다. 취약점들을 살펴보면서 파일 업로드 시 서버에 어떤 방어로직들을 작성해야하는지 알아볼 수 있습니다. 이러한 파일 취약점을 본 논문에서는 Unrestricted File Upload라고 기술합니...
Join discussionOct 4, 2024 · 2 min read · Solved: Method 1: set filter to see image files in burp proxy upload an image file and retrive the POST request and sent it to repeater. now from the browser click to go back to “My Account”. now retrive the GET request and send it to repeater. ...
Join discussionAug 21, 2023 · 1 min read · File Upload Bypass Methods NULL Byte Bypass webshell.php%00.jpg By inserting a NULL Byte in the middle, as in webshell.php%00.jpg, the processed filename becomes "webshell.php." The NULL Byte signifies the end of a string. HTML Encoding In cases whe...
Join discussionAug 21, 2023 · 2 min read · Definition File upload attacks involve malicious users uploading files to web applications or websites to exploit security vulnerabilities. Typically, web shell files are uploaded. Cyber Security: What is Web Shell List of Vulnerable Points Types of...
Join discussion