upload-labs problem solving report- 05

thought process

  1. Test, first look at the back end or the front end.

  2. can be seen

    The php3 file has reached the step of network transmission, indicating that it is verified by the backend and not based on MIME verification.

  3. At this time, it is judged which type of verification it is. After testing the types of .mp3 .txt .doc, we can know that it is based on blacklist verification.

  4. Check the source code of the page and find that the backend has renamed it, so the modification .htaccessmethod fails

  5. I tried .pHpbut was blocked, so I rejected this idea first. It turned out that I had tried too little.
  6. After some series of thinking to no avail, only Baidu, the result is that .Php can pass. This taught me a lesson, I still have to try more.
  7. It should be noted that this method can only be used in the Windows environment, because Linux is case-sensitive.

Guess you like

Origin blog.csdn.net/qq_40790680/article/details/128971603