banner
[面包]MrTwoC

[面包]MrTwoC

你好，欢迎来到这个基于区块链的个人博客 名字：面包 / MrTwoc 爱好：跑步(5/10KM)、咖啡、游戏(MMORPG、FPS、Minecraft、Warframe) 兴趣方向：Rust、区块链、网络安全、量子信息(量子计算)、游戏设计与开发
bilibili
steam
email
github
HomeArchives[Code]Rust[区块链]Blockchain[引擎]Rust-Bevy[安全]Web2Security

File Upload && BrupSuite

#Web2Security#UpLoadFile#BrupSuite30
AI Translation
This post is translated from Chinese into English through AI.View Original
AI-generated summary
The difficulty level is medium. The source code restricts the upload of the image.png file, so the user opens Burp Suite to intercept the request and uploads a web shell. The user copies the code into a text file, changes the file extension to .php, and creates a web shell file. The user intercepts the image.png file and modifies the Content-Type to image/png to bypass the restriction. The user successfully uploads the image.png file and accesses the uploaded file at http://192.168.1.2/dvwa/hackable/uploads/111.php. The user then opens a web shell tool called AntSword and enters the address and password to gain access. By double-clicking on image.png, the user can view the website structure and the files it contains.

Difficulty: medium

image.png
When I saw the source code, it restricted the upload type.
image.png
So I opened brupSuite
Enabled interception, and then uploaded a webshell:

Copy the code into a txt file, then change the extension to php, and you will have a webshell file.

Here it is intercepted
image.png
Change Content-Type to:
image/png
Then allow it, and the upload is successful
image.png
Then follow the upload address and enter the link:
http://192.168.1.2/dvwa/hackable/uploads/111.php
It shows a blank screen, indicating successful exploitation
Open AntSword, enter the address, password: pass
image.png
image.png
Double-click to see the website structure and the files it contains
image.png

Loading...
Ownership of this post data is guaranteed by blockchain and smart contracts to the creator alone.