The actual operation of the file upload vulnerability -upload-labs

Upload the file to bypass the front js.

the first method:

First find upload points on the website.

 

 Phpinfo.php upload files to which the code is:

 

 Click Upload

 

 This time view F12 View source

 

 We will find that we have an event to search a look at this checkFile () function

 

 We can delete this event then upload

 

 Then upload files

 

Upload successful, then right picture, select Copy image address, open another tab

 The second method:

First using a normal extension .jpg over the front end, then burp for capture, the extension .jpg .php changed, and then sends to the server.