Shulou(Shulou.com)06/01 Report--

Topic: upload bypass

1. Upload attempt. Upload jpg, indicating that you need to upload php.

2. Upload php, indicating that only jpg,png can be uploaded.

3. Bp the artifact and grab the bag.

4. Change the package. Here, 00 is used to truncate the upload (path truncation)

Principle: when uploading, when the file system reads the 0x00, it will think that the file is over, which is caused by the programmer's lax filtering of the file upload path.

Add the path to 1.php (any name, type php), and then, select, ctrl+shift+u (restore).

According to our construction, the path to the uploaded file will be: / upload/1.phprose.jpg. This bypasses suffix filtering. At the same time, it stops when the file system is read, and it becomes / upload/1.php. Meet the requirements of uploading php files on the topic

5. Go, get the answer:

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.