HTB CWES
HTB Certified Web Exploitation Specialist (CWES)
File Upload VulnerabilitiesEnglish
Exam overviewPractice session
A file upload feature allows uploading images. An attacker uploads a PHP webshell named shell.php.jpg. The server accepts it based on the file extension check. Which configuration allows the webshell to execute if the server is Apache with mod_php?
Loading your practice session…