[gosta51]

I need help to bypass a filter to upload a webshell, the filter is using a whitelist for specific extensions [pdf doc txt jpg png]
the filter is basically check if the file name ends with some of there keywords, i tried many methods such null byte (%00, \x00, %0A, %0B)
Is there any chance to move forward?

[Lokeal]

You need to post everything you've tried for any other members to suggest evasion methods.

[SIM-4608916]

Try rename the while like this: webshell.pdf.php or webshell.pdf.phtml, same for doc, txt, jpg, png and php3,4,5.

Use burp suite to see how the post request is done.

[gosta51]

Try rename the while like this: webshell.pdf.php or webshell.pdf.phtml, same for doc, txt, jpg, png and php3,4,5.

Use burp suite to see how the post request is done.

I can't as i said the filter compare the extension with the keyword on whitelist, you are talking about bypassing blacklist filter which is not the case.

[donwannyw]

searching were i can buy a good phone rat that has logs on the features and many other features.

---

please help me , were can i buy android rat that has key logger on its features