File Upload


If you have a program with several restrictions to avoid upload .php or related, maybe you could try to upload a .htaccess file to create a rule inside the server to make a random extension act as a .php extension
AddType application/x-httpd-php .loquesea
So, if the file is uploaded successfully, then if you try to upload a file called (for example) hola.loquesea with PHP content, it will be interpreted as PHP code!