#php_file_upload kết quả tìm kiếm

NullSecX

11 thg 10

Unrestricted file-upload bypass: if a server trusts only Content-Type/extension, attackers can use Content-Disposition double-extensions to upload .asp/.php disguised as image/jpeg. magic-bytes ≠ MIME, presence of `<%...%>` or `<?php`, accessible executable URIs. #BugBounty

NullSecurityX's tweet image. Unrestricted file-upload bypass: if a server trusts only Content-Type/extension, attackers can use Content-Disposition double-extensions to upload .asp/.php disguised as image/jpeg. magic-bytes ≠ MIME, presence of `&lt;%...%&gt;` or `&lt;?php`, accessible executable URIs. #BugBounty

Yumi

@Yumi_Sec

24 thg 4, 2020

If a web application allow you to upload a .zip file, zip:// is an interesting PHP wrapper to turn a LFI into a RCE. #BugBounty #BugBountyTips #InfoSec

Yumi_Sec's tweet image. If a web application allow you to upload a .zip file, zip:// is an interesting PHP wrapper to turn a LFI into a RCE.

#BugBounty #BugBountyTips #InfoSec

Anton

@therceman

26 thg 9, 2023

Bug Bounty Tip: When testing file upload functionality, don't forget to check for path traversal. This can potentially exploit arbitrary file overwrite vulnerabilities. Doing so could result in the overwriting of static files like JS/HTML or even other users' files. Cheers!

therceman's tweet image. Bug Bounty Tip:

When testing file upload functionality, don't forget to check for path traversal. This can potentially exploit arbitrary file overwrite vulnerabilities.

Doing so could result in the overwriting of static files like JS/HTML or even other users' files.

Cheers!

M. Qasim Munir

@Savitar0x01

8 thg 10, 2020

Want to bypass file upload restrictions? Add ' , . " after the file extension just like: file.php' , file.php. , file.php" worked on many targets. #BugBounty #bugbountytips

Savitar0x01's tweet image. Want to bypass file upload restrictions?
Add ' , . " after the file extension just like:
file.php' , file.php. , file.php" worked on many targets.
#BugBounty #bugbountytips

terminally onλine εngineer

@tekbog

14 thg 12

and then you would upload the files through FTP to the server

Sardar

@sardar0x1

10 thg 2

Bypass file upload on xiaomi With this method .extentions./%00.png Example : .php.%00.png #bugbounty #bugbountytips #bug #CYBER

Vitthal Shinde🇮🇳

@0_1VitthalS

14 thg 7, 2018

when you came up with a file= parameter before trying for other rfi see phpinfo page is accessible or not you might get some juicy information. e.g.file=data:text/plain, <?php phpinfo(); ?> #bugbountytip

0_1VitthalS's tweet image. when you came up with a file= parameter before trying for other rfi see phpinfo page is accessible or not you might get some juicy information.
e.g.file=data:text/plain, &lt;?php phpinfo(); ?&gt;
#bugbountytip

Lonli-Lokli

@sirlonlilokli

6 phút

Looks like formsubmit.io is down, is there any alternative with file.attachments ?

hipotermia

@hipotermia

26 thg 11, 2022

I stumbled upon a file upload that allowed any file type. Because the site was running on PHP, I could upload and execute code on the server, so I tried with a simple shell, but system, exec, passthru... seemed to be disabled. However, there are more ways to exploit this.

hipotermia's tweet image. I stumbled upon a file upload that allowed any file type. Because the site was running on PHP, I could upload and execute code on the server, so I tried with a simple shell, but system, exec, passthru... seemed to be disabled. However, there are more ways to exploit this.

chux

@chux13786509

24 thg 1

Another critical bug 🔥🐞 Combination of two vulnerabilities: Path traversal + File upload = Arbitrary File Write 😈 The vulnerable function behind was php://input without any validation 🤭

chux13786509's tweet image. Another critical bug 🔥🐞
Combination of two vulnerabilities:
Path traversal + File upload = Arbitrary File Write 😈
The vulnerable function behind was php://input without any validation 🤭

Anna🎉

@anna_Xtech

21 thg 10

Built a simple FTP server/client in C Features: - Upload / Download files - Easy commands: ls, get, put, quit Learn how sockets transfer files across a network

anna_Xtech's tweet image. Built a simple FTP server/client in C

Features:
- Upload / Download files
- Easy commands: ls, get, put, quit

Learn how sockets transfer files across a network

Muhammad Waseem

@wgujjer11

18 thg 3

WooCommerce plugin allows LFI! 🍃 02: Capture request in Burp 03: Change request method to POST and add: POST /wp-admin/admin-ajax.php?template=../../../../../../../etc/passwd&value=a&min_symbols=1 04: Also add: action=woof_text_search& 05: That’s it! You got local files.

wgujjer11's tweet image. WooCommerce plugin allows LFI! 🍃

02: Capture request in Burp

03: Change request method to POST and add:

POST /wp-admin/admin-ajax.php?template=../../../../../../../etc/passwd&amp;value=a&amp;min_symbols=1

04: Also add:

action=woof_text_search&amp;

05: That’s it! You got local files.

Abhishek Meena 🏵️

@aacle_

25 thg 12, 2022

If a web application allow you to upload a .zip file, zip:// is an interesting PHP wrapper to turn a LFI into a RCE. #BugBounty #BugBountyTips #InfoSec

aacle_'s tweet image. If a web application allow you to upload a .zip file, zip:// is an interesting PHP wrapper to turn a LFI into a RCE.

#BugBounty #BugBountyTips #InfoSec

Ben Bjurstrom

@benbjurstrom

21 thg 10

Been working on this file upload module for Laravel and React. It uses S3 compatible storage so the files never touch your app server.

Aaron Francis

@aarondfrancis

14 thg 3, 2022

One of my favorite things about using S3 in PHP is that you can register a stream wrapper to interact with files. You can use the native PHP functions like fopen, fread, etc. Very helpful when you have massive files you don't want to load into memory! (CSVs are a use case.)

aarondfrancis's tweet image. One of my favorite things about using S3 in PHP is that you can register a stream wrapper to interact with files.

You can use the native PHP functions like fopen, fread, etc.

Very helpful when you have massive files you don't want to load into memory!

(CSVs are a use case.)

Abhishek Meena 🏵️

@aacle_

12 thg 11, 2022

If a web application allow you to upload a .zip file, zip:// is an interesting PHP wrapper to turn a LFI into a RCE. #BugBounty #BugBountyTips #InfoSec More on this🧵 :👇

X

@TheMsterDoctor1

14 thg 1, 2024

File Upload Cheatsheet Where to find In upload file feature, for example upload photo profile feature How to exploit read also this pdf it conayin a many of ideas 1-github.com/Az0x7/vulnerab… by 0xAwali 2-github.com/Az0x7/vulnerab… by ebrahim hegazy

RoHiT

@Dedrknex

24 thg 10

Found a file upload option escalate it to stored x$$ !!

Nadir Ghafoor-Local SEO

@mnadirghafoor

4 thg 2, 2024

"Step into the exciting realm of web development with PHP and Laravel Join us as we embark on a journey where creativity meets practicality, and together, let's craft the future of web development!" #php_file_upload #php_tutorial #programming #corephp #coder #codinglife #Web3

mnadirghafoor's tweet image. "Step into the exciting realm of web development with PHP and Laravel Join us as we embark on a journey where creativity meets practicality, and together, let's craft the future of web development!"
#php_file_upload #php_tutorial #programming #corephp #coder #codinglife #Web3

Không có kết quả nào cho "#php_file_upload"

Nadir Ghafoor-Local SEO

@mnadirghafoor

4 thg 2, 2024

Something went wrong.

United States Trends

1. Friendly 62.3K posts
2. SNAP 718K posts
3. Mac McClung 1,373 posts
4. Big Dom 1,920 posts
5. James Wiseman N/A
6. #JUNGKOOKXCALVINKLEIN 57.5K posts
7. Grokipedia 6,190 posts
8. Jamaica 115K posts
9. Jessica 27.7K posts
10. Riley Gaines 36.4K posts
11. #OTGala6 146K posts
12. Runza N/A
13. Hofer 1,630 posts
14. Monday Night Football 7,162 posts
15. Sports Equinox 13.8K posts
16. Mazie 1,420 posts
17. MRIs 9,060 posts
18. Adem Bona N/A
19. 7 Democrats 5,602 posts
20. 53 Republicans 5,071 posts