ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ28

VerifiedWeb Application Penetration Testing Methodology

Richard, a penetration tester, was asked to assess a web application. During the assessment, he identified a file-upload field that lets users upload profile pictures. While scanning the page for vulnerabilities, Richard found a file-upload exploit on the website. Richard wants to test the web application by uploading a malicious PHP shell, but the web page rejected the upload. To bypass the security, Richard appended the `˜jpg' extension to the end of the file. The new

[1]

successfully uploaded the PHP shell.

Which of the following techniques did Richard use to upload the PHP shell?

Explanation

Changing the uploaded filename by appending an allowed-looking image extension manipulates a user-controlled upload parameter to evade weak extension validation. File-upload defenses must validate the full filename and file content because double or misleading extensions can bypass insufficient checks.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!