+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: How to bypass upload filter whitelist (/showthread.php?tid=6146572)
How to bypass upload filter whitelist - gosta51 - Mar 27, 2021
I need help to bypass a filter to upload a webshell, the filter is using a whitelist for specific extensions [pdf doc txt jpg png]
the filter is basically check if the file name ends with some of there keywords, i tried many methods such null byte (%00, \x00, %0A, %0B)
Is there any chance to move forward?
RE: How to bypass upload filter whitelist - Lokeal - Mar 27, 2021
You need to post everything you've tried for any other members to suggest evasion methods.
RE: How to bypass upload filter whitelist - SIM-4608916 - Mar 28, 2021
Try rename the while like this: webshell.pdf.php or webshell.pdf.phtml, same for doc, txt, jpg, png and php3,4,5.
Use burp suite to see how the post request is done.
RE: How to bypass upload filter whitelist - gosta51 - Mar 28, 2021
(Mar 28, 2021 04:43 PM)ViNuXi Wrote: Try rename the while like this: webshell.pdf.php or webshell.pdf.phtml, same for doc, txt, jpg, png and php3,4,5.
Use burp suite to see how the post request is done.
I can't as i said the filter compare the extension with the keyword on whitelist, you are talking about bypassing blacklist filter which is not the case.
RE: How to bypass upload filter whitelist - donwannyw - Apr 6, 2021
searching were i can buy a good phone rat that has logs on the features and many other features.
please help me , were can i buy android rat that has key logger on its features