file upload

PortSwigger's "Web shell upload via Content-Type restriction bypass" Walkthrough

Dec 29, 2021 3 min read appsec

This is the next of PortSwigger’s file upload labs. This one is only slightly more difficult because of a Content-Type check being performed by the server. You’ll need Burp Suite

PortSwigger's "Remote code execution via web shell upload" Walkthrough

Dec 29, 2021 2 min read appsec

This is a writeup for the first of PortSwigger’s file upload labs. This walkthrough is a simple shell upload with no additional restrictions. For this walkthrough, you’ll need a Portswigger Academy