<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: testing-file-upload-vulnerabilities
description: >-
  Identify and exploit insecure file upload for RCE, XSS, or data exfiltration.
domain: cybersecurity
subdomain: bug-bounty
tags:
  - file-upload
  - rce
  - web-shell
  - bug-bounty
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: ["T1190", "T1505.003"]
---

# Testing File Upload Vulnerabilities

## Overview

Identify and exploit insecure file upload for RCE, XSS, or data exfiltration.

## Prerequisites

| Requirement | Install |
|---|---|
| Burp Suite | Request manipulation |
| ExifTool | `apt install exiftool` |
| Python 3.10+ | For agent tooling |

## Key Concepts

File upload vulns arise from inadequate validation of type, content,
and storage. Attacks: web shell, polyglot, content-type bypass, traversal.

## Quick Reference

```bash
node agent.js test --url https://target.com/upload --file shell.php.jpg
node agent.js polyglot --type php-jpg --output payload.php.jpg
node agent.js bypass --url https://target.com/upload --method content-type
node agent.js traverse --url https://target.com/upload --filename '../shell.php'
```

## Workflow

1. Identify upload functionality
2. Test file extensions
3. Content-type manipulation
4. Generate polyglots
5. Filename traversal
6. Check direct access
7. Document impact

## Verification

- Verify bypass techniques
- Confirm polyglot valid
- Validate traversal payloads
- Check execution
- Verify exploitation chain

## References

- OWASP Testing Guide — https://owasp.org/www-project-web-security-testing-guide/
- MITRE ATT&CK — https://attack.mitre.org/
- NIST SP 800-53 — https://csf.tools/reference/nist-sp-800-53/
