File Upload Testing

• Upload the malicious file to the archive upload functionality and observe how the application responds

• Upload a file and change its path to overwrite an existing system file

• Large File Denial of Service

• Metadata Leakage

• ImageMagick Library Attacks

• Pixel Flood Attack

Bypasses

• Null Byte (%00) Bypass

• Content-Type Bypass

• Magic Byte Bypass

• Client-Side Validation Bypass

• Blacklisted Extension Bypass

• Homographic Character Bypass

GitHub - jonaslejon/malicious-pdf: 💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.shGitHub

vulnerability-Checklist/File Upload at main · Az0x7/vulnerability-ChecklistGitHub