The document discusses the insecure file upload vulnerability, detailing how it works and providing an example of an HTTP file upload form. It includes references for further reading on exploiting file upload vulnerabilities and showcases the author's background as a pentester and security enthusiast. The document also features links to the author's social media profiles.

1. INSECURE FILE UPLOAD VULNERABILITY
&
SECURITY MEASURES
Kunwar Atul

2. Agenda
Whoami
What is file upload vulnerability????
How http file upload works????
Demo
References

3. #whoami
Kunwar Atul
Pentester(Web/Network/Mobile)
Security Enthusiast | Learner
Ultra N00b in Hardware Hacking
Blogger (kunwar-atul-hax0r.blogspot.in)
Bug Hunter

4. What is file upload vulnerability????

5. How http file upload works????

6. How http file upload works????
<form action="uploader.php" method="post" enctype="multipart/form-data">
Select File:
<input type="file" name="fileToUpload"/>
<input type="submit" value="Upload Image" name="submit"/>
</form>

8. Demo

9. References
1. https://pentestlab.blog/2012/11/29/bypassing-file-upload-restrictions/amp/
2. http://www.hackingarticles.in/5-ways-file-upload-vulnerability-exploitation/
3. https://www.sans.org/reading-room/whitepapers/testing/web-application-file-
upload-vulnerabilities-36487
4. https://www.sans.org/reading-room/whitepapers/testing/web-application-file-
upload-vulnerabilities-36487

10. Wake Up It’s Over
Find me here
Facebook : https://www.facebook.com/kunwaratulhax0r
Twitter : https://twitter.com/kunwaratulhax0r