File upload vulnerability test based on DVWA

Catalog

DVWA

Low

Medium

---

DVWA

Low

DVWA Security Of “low” Levels can be uploaded directly “ In a word ” Trojan horse .

1.1 Write test Trojan

<?php
phpinfo();
?>

1.2 Upload directly without suffix filtering

1.3 Echo the upload path , Just visit directly

http://localhost/dvwa/hackable/uploads/info.php

Medium

Medium Level different from Low Level ,Medium The sector imposes upload restrictions on the front end , By bypassing the detection mechanism , Capture packets and change the suffix to achieve the upload effect .

2.1 Upload legal files , Open the agent

 2.2 After catching the packet ,send to repeater

 info.png Change it to info.php

The response code is 200 Instructions uploaded successfully .

2.3 perform php Script

https://localhost/dvwa/hackable/uploads/info.php