Let's experiment. Upload the item bank around.

Topic: upload bypass

1. Upload attempt. Upload jpg, indicating that you need to upload php.

2. Upload php, indicating that only jpg,png can be uploaded.

3. Bp the artifact and grab the bag.

4. Change the package. Here, 00 is used to truncate the upload (path truncation)

Principle: when uploading, when the file system reads the 0x00, it will think that the file is over, which is caused by the programmer's lax filtering of the file upload path.

Add the path to 1.php (any name, type php), and then, select, ctrl+shift+u (restore).

According to our construction, the path to the uploaded file will be: / upload/1.phprose.jpg. This bypasses suffix filtering. At the same time, it stops when the file system is read, and it becomes / upload/1.php. Meet the requirements of uploading php files on the topic

5. Go, get the answer: