#file-upload-attack articles

KNKhoa Nguyenkhoafrancis.xyzOct 15, 2025 · 8 min read

Limited File Uploads - File Upload Attacks

So far, we have been mainly dealing with filter bypasses to obtain arbitrary file uploads through a vulnerable web application, which is the main focus of this module at this level. While file upload forms with weak filters can be exploited to upload...

0

EEibeib.hashnode.devSep 7, 2025 · 7 min read

Bypassing Cloudflare WAF with comma symbol to gain RCE using a file upload vulnerability (Ethiack CTF)

Recently, I was reading a blog titled “Don’t Fear The AI Reaper: Using LLMs to Hack Better and Faster” which was explaining how hackers can hack better with the help of AI. The blog talked about how AI can often generate vulnerable code, and it linke...

0

KNKhoa Nguyenkhoafrancis.xyzAug 12, 2025 · 18 min read

Upload File Vulnerabilities

What are file upload vulnerabilities? File upload vulnerabilities are when a web server allows users to upload file to its filesystem without sufficiently validating things like their name, type, contents, or size. Failing to properly enforce restric...

0

IAIdo Abramovid0xa.hashnode.devJul 14, 2025 · 5 min read

HackTheBox - File Upload Attacks - Skills Assessment Walkthrough

Scenario You are contracted to perform a penetration test for a company's e-commerce web application. The web application is in its early stages, so you will only be testing any file upload forms you can find. Try to utilize what you learned in this ...

0

BByeongGyuKimbeygee.hashnode.devJun 7, 2025 · 7 min read

(In)Security of File Uploads in Node.js

2024년에 나온 구글에서 Florida 대학교와 협업하여 작성한 논문입니다. Node.js 환경에서 파일 업로드 시 발생할 수 있는 취약점 13가지를 열거하고, 상용중인 유명 파일 업로드 라이브러리들이 이 취약점에 얼마나 해당되는지를 분석한 논문입니다. 취약점들을 살펴보면서 파일 업로드 시 서버에 어떤 방어로직들을 작성해야하는지 알아볼 수 있습니다. 이러한 파일 취약점을 본 논문에서는 Unrestricted File Upload라고 기술합니...

0

AUAditya Uniyaladityauniyal.hashnode.devOct 4, 2024 · 2 min read

Lab: Web shell upload via Content-Type restriction bypass

Solved: Method 1: set filter to see image files in burp proxy upload an image file and retrive the POST request and sent it to repeater. now from the browser click to go back to “My Account”. now retrive the GET request and send it to repeater. ...

0

HHaneunhanlee.hashnode.devAug 21, 2023 · 1 min read

Cyber Security: File Upload Cheet Sheet

File Upload Bypass Methods NULL Byte Bypass webshell.php%00.jpg By inserting a NULL Byte in the middle, as in webshell.php%00.jpg, the processed filename becomes "webshell.php." The NULL Byte signifies the end of a string. HTML Encoding In cases whe...

0

HHaneunhanlee.hashnode.devAug 21, 2023 · 2 min read

Cyber Security: What is File Upload

Definition File upload attacks involve malicious users uploading files to web applications or websites to exploit security vulnerabilities. Typically, web shell files are uploaded. Cyber Security: What is Web Shell List of Vulnerable Points Types of...

0

#file-upload-attack

Search Hashnode