Web shell upload via Content-Type restriction bypass | Web Security Academy

This lab contains a vulnerable image upload function. It attempts to prevent users from uploading unexpected file types, but relies on checking user-controllable input to verify this.

To solve the lab, upload a basic PHP web shell and use it to exfiltrate the contents of the file /home/carlos/secret. Submit this secret using the button provided in the lab banner.

You can log in to your own account using the following credentials: wiener:peter

[jamallewis]

This was the most beneficial video I found for this Lab. Thank you for keeping it simple, yet informative.

[GUEDIARREH]

your are legend !!! the cacique you use is fast an simple wow