webProeasy

Файлообменник (File Exchange)

hackerlab

Task: File upload service with extension blacklist and .htaccess available. Solution: Discovered AddType directive in .htaccess that processes .x-httpd-php as PHP; uploaded webshell with this extension to bypass blacklist and achieve RCE.

$ ls tags/ techniques/
rcefile_uploadwebshellapachehtaccess_misconfigurationphp_handlerextension_bypassblacklist_bypass
.htaccess misconfiguration analysisFile upload filter bypass via custom extensionCustom PHP handler extension abuse
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups