Remote code execution via web shell upload

https://portswigger.net/web-security/file-upload/lab-file-upload-remote-code-execution-via-web-shell-upload

Level: Apprentice

• Here in this lab is a simple demonstration of a file upload vulnerability.

• We need to access a file in /home/carlos/secret.

• Try to upload just a single malicious file like is show in the image.

• We see that we can upload php file without any restriction.

• Now to see the content of /home/carlos/secret, use get_file_contents() php function.

• Once uploaded, set the URL and you will see the flag to submit.