How File Upload Vulnerabilities Work!

👩‍🎓👨‍🎓 Learn about File Upload vulnerabilities. In this video, we are going to learn about ways on how to exploit file upload vulnerabilities.

Overview:
00:00 Intro
00:12 Lab overview
01:06 Inspect HTTP requests
01:58 Upload PHP code
04:20 Read passwd file
04:50 Solve lab
05:51 Conclusion

[nathangriffiths]

Thank you Intigriti. I find these short videos easy to understand and extremely helpful for my learning.

[asaadx]

This was very smooth ! ❤️ Your tune of voice can make watch all of the channel videos without any issues 😁❤️ what a great content and great people you are intigriti ❤️ Love here from Egypt 😁❤️

[havefun]

that's is an amazing video man, I have been trying to solve this lab for over two weeks now. And I finally DID IT

[rajanrawal]

amazing, we need such playlist more and more in the future

[nishantdalvi]

Thanks you Intigriti for providing such a quality content free of cost

[Palikg]

Dude, you're the Best with your explainations!!! Thank you

[CldSpace]

Bro thank you so much. As a beginner, I had no clue what any of this meant. I’m subbing.

[terabaap]

Well Explained brother thanks you !!!

[steiner]

Honestly This Is Interesting.. Keep Pushing... Regards, Steiner254.

[houba]

Hello in this is the content of the file is saved in the db or the file is saved in the filesystem?

[mosesroy]

the best channel to learn ethical hacking...very easy to understand

[nokotable]

you did justice to this lab. please what is the best solution to such an attack, does that mean if I upload a dot PHP file from the frontend (webb form) of the application it will still go through. without verifying the file extension?

[xgodson]

Hey bro. Really you r speaking Very Slowly and softly. I <3 it

[samexter]

Does this lab restrict the codes that can be executed? Is only the get_file_content be used?

[dizonnicolefranza.]

thanks, may I suggest next vid is upload file leads to xss

[Lapiduse]

I can't stop going through the labs, that's it very addictive)))
Thanks!

[masthanjinostra]

Bypassing security techniques for this ..

[VDenys]

I did everything correctly, sequentially, but in my Show File - Response - Content Length: 0 ...

[rehxn]

but wait where this carlos came from like i dont get that part why only carlos why not john mike eddy

[KushChoudhary]

Didn't explain the most important part 'why the code gets executed' and 'why does content-type not able to mitigate this'. One word: Disappointed.