Exploiting XXE to perform SSRF attacks
Laboratorio de Portswigger sobre XXE
Justice-Reaper
Exploiting XXE using external entities to retrieve files
Laboratorio de Portswigger sobre XXE
Remote code execution via polyglot web shell upload
Laboratorio de Portswigger sobre File Upload Vulnerabilities
Web shell upload via obfuscated file extension
Laboratorio de Portswigger sobre File Upload Vulnerabilities
Web shell upload via extension blacklist bypass
Laboratorio de Portswigger sobre File Upload Vulnerabilities
Web shell upload via path traversal
Laboratorio de Portswigger sobre File Upload Vulnerabilities
File path traversal, validation of file extension with null byte bypass
Laboratorio de Portswigger sobre Path Traversal
File path traversal, validation of start of path
Laboratorio de Portswigger sobre Path Traversal
File path traversal, traversal sequences stripped with superfluous URL-decode
Laboratorio de Portswigger sobre Path Traversal
File path traversal, traversal sequences stripped non-recursively
Laboratorio de Portswigger sobre Path Traversal