BSCP

Burp Suite Certified Practitioner (BSCP)

File Upload VulnerabilitiesEnglish
Exam overview

Practice session

A web application uses file upload functionality. An attacker uploads a file named `shell.php%00.jpg`. In some older PHP installations, what does the null byte (`%00`) achieve?

Loading your practice session…