Exploiting a File Upload Vulnerability - MetaCTF

[@franklinstevens3540]

I really enjoyed this. The break down was top-notch and easy to follow. Thanks.

[@nichetcher1]

So awesome to learn by watching you do this Ctf.

[@ForeverMan]

well, this exploit is IMPOSSIBLE... I have no idea how that server parsed a PNG as PHP, that might be part of the CTF but in real world, its impossible

[@tiptrcks3960]

Hey dude do you have any idea if the server converts the image to base64 and then appends it in src of img tag instead of relying on image path, then is there any way to go further?

[@Duder-y5o]

Burp would change your life my boi

[@ForeverMan]

@@Duder-y5o I use it, what are you talking about ?

[@poxishovel]

Love the video! Thanks for sharing your knowledge.

[@simonwatson5299]

The last time I heard what sounded like 'rubber keys' was on my Sinclair 48K back in the 1980's, lol. If you've bought a keyboard with rubber keys, junk it. Lifes too short. Anyway, great video as always. And thanks for the FREE education, it's very much appreciated. Can't wait till next vid. 😚

[@قلإنالأمركلهبيدالله]

how to learn find vulnerability ?

[@Ankitverma-yc7zf]

When I tried this on my local machine with apache web server, my server is not returning the image data as shown in your video instead of that my server is rendering the image. I dont understand that how in your browser the image is not rendering and server is giving the image data as text.

[@ifexer]

what if there is permission, that outputting "Acess denied" in page?

[@8080VB]

Hey I just tried in a local php server to see if it works. Unfortunately it doesn't. I saw this method last day tried adding in multiple paths in an image. Still doesn't. This won't work in a Apache server or a php?

[@kazhiroma9736]

currently very similar challenge in picoCTF

[@Liquid6t9]

Excellent content! Keep it up.

[@dazztee]

kool enjoyed, look forward to some more

[@steiner254]

Awesome!

[@RMD80GAMER]

Thank you for your hard work 😄

[@GamingTy12]

holy videos LETS GOOOOOOOOOOOOOO!

[@Satellite92]

good job!

[@dafoxlana]

Thank you !! :)

[@FullStack-Fuel]

awesome

[@lazyguy9977]

Good stuff

[@diwi_dw]

👍👍

[@fayoztoshmirzaev7895]

You are really beatiful:-)

[@linuxturtorials9591]

Assalam aleykum every man an and women must cover their bodies according to islam

[@Yoyo_Glitch]

She's not muslim

[@viniciusnascimento4285]

lol woman

[@liamtwine2267]

Omg. Your the most beautiful hacker I have ever seen. As a fellow pentester I see many people on a daily basis but you are incredible.

[@atlantaswifter]

simp

[@Flaneur27]

Lmfaoo you can’t be serious Lmfaoo not the place to shoot your shot

[@anuradhalakruwan1918]

Friend I like learning Cybersecurity..... Please help me friend...?

[@cakesnatcher4541]

U can exploit Hadjis file anyday

[@aminmgs9932]

contains a virus so the upload was canceled: YARA.php_in_image.UNOFFICIAL FOUND pls help

[@Duder-y5o]

Saw this chick on the Hub

[@shenetworks]

Seek help for your addiction love