PHP Web Shells

  • An open-source general-purpose scripting language often used as part of a web stack

Bypassing File Type Restriction

  • In situations where there are file type restrictions this is an option

  • With BurpSuite interceptor turned on, attempt to upload the .php file

  • Change Content-type from application/x-php to image/gif

  • This will trick the server and allow us to upload the .php file, bypassing the file type restriction

Last updated