[vira]

Hello

sorry can i have questions ? i was hacked one website via sql injection and logined admincp

but i try upload backdoor there via burpsuite

upload : shell.php.jpg then use burpsuite edit to : shell.php
but i got message blocked like this picture



can you suggest me ,how to bypass this one ? thank you so much

[Money-]

The validation might be on on server-side. Its checking your file contents , the size instead. So yeah changing the extension won't work.

[vira]

The validation might be on on server-side. Its checking your file contents , the size instead. So yeah changing the extension won't work.

hi

thank for your reply

yeath , i know like that

so can you suggest me ? some way to bypass this one ?

thank you

[Money-]

hi

thank for your reply

yeath , i know like that

so can you suggest me ? some way to bypass this one ?

thank you

Your php shell starts with <?php right?

try changing to this <?=

See if it works.

Its just a simple bypass to see whether the back-end checks for starting line with <?php

[vira]

Your php shell starts with <?php right?

try changing to this <?=

See if it works.

Its just a simple bypass to see whether the back-end checks for starting line with <?php

hi bro

i just online today

thank for your suggest so much

but i try test, its still not work :( , the site victim show ip blocked :(

could you please instruction me , some way better ? :(
thank you