File Upload

.htaccess

If you have a program with several restrictions to avoid upload .php or related, maybe you could try to upload a .htaccess file to create a rule inside the server to make a random extension act as a .php extension 😯

AddType application/x-httpd-php .loquesea

So, if the file is uploaded successfully, then if you try to upload a file called (for example) hola.loquesea with PHP content, it will be interpreted as PHP code!

Last updated