Infiltr8: Red-Book

Work in progress

This page is incomplete — content may be missing or unverified.

File Upload

Theory

File upload vulnerabilities are when a web server allows users to upload files to its filesystem without sufficient validation. We may leverage this vulnerability to upload executable code (i.e. php, aspx, jsp ...) and execute it by accessing it.

Practice

Resources

Unrestricted File Upload | OWASP Foundationowasp.org File uploads | Web Security Academyportswigger.net

On this page