当前位置：网站首页>CTF learning notes 18:iwesec file upload vulnerability-03-content-type filtering bypass

CTF learning notes 18:iwesec file upload vulnerability-03-content-type filtering bypass

2022-06-24 04:56:00 【lf_ x】

One 、 Normally, only pictures can be uploaded

Insert picture description here

Two 、 start-up burpsuite Upload gif file , Block before uploading

Insert picture description here
Insert picture description here
After turning on Interception , Upload again
Insert picture description here
Or change the file extension to gif, There is no need to change Content-Type
Insert picture description here
Insert picture description here
Insert picture description here

3、 ... and 、 Connect the test

Insert picture description here
Insert picture description here

原网站

版权声明
本文为[lf_ x]所创，转载请带上原文链接，感谢
https://yzsam.com/2022/02/202202211635568176.html

边栏推荐

猜你喜欢

随机推荐