Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Web-13. Bypassing File Upload Checks in ImageVault
Mission
ImageVault is an image hosting service that accepts JPG, PNG, and GIF uploads. If its validation only checks the end of the filename, what kind of disallowed files might slip through?
Hints
Hint 1 Show
Check whether upload validation looks at file content or just the extension
Hint 2 Show
Double extensions (e.g. shell.php.jpg) may slip past naive checks
Hint 3 Show
Try filenames that end in an allowed extension but contain a dangerous one too