12-13-2015, 11:07 AM
You can also use these extension for::
Here is a list of bypasses:
1)shell.jpg.php (satisfies as check for jpg only)
2)shell.jpg.PhP (obfuscation)
3)shell.php;.jpg (sometimes can ignore whats after ";")
4)shell.php%0delete0.jpg (the infamous NULL byte which comments out trailing text, remove the word delete so the zeros join together, blogspot strips this string!)
5)shell.php.test (defaults to first recognised extension ignoring "test")
6)shell.php.xxxjpg (still ends in .jpg, but not recognised extension so will default to php!)
7).phtml (a commonly used php parsed extension often forgotten about!)
8).php3/.php4/.php5 (valid PHP extensions possibly left out of extension blacklists)
------------------------------------------------------------------------------------------------------------
Thanks for watching guys ^_^
-----------------------------------------------------------------------------------------------------------
This tutorial is for knowledge purpose only. I will be not responsible for any harm
------------------------------------------------------------------------------------------------------------
![[Image: 1449076552.png]](http://warrenandsonia.com/uploads/1449076552.png)
Here is a list of bypasses:
1)shell.jpg.php (satisfies as check for jpg only)
2)shell.jpg.PhP (obfuscation)
3)shell.php;.jpg (sometimes can ignore whats after ";")
4)shell.php%0delete0.jpg (the infamous NULL byte which comments out trailing text, remove the word delete so the zeros join together, blogspot strips this string!)
5)shell.php.test (defaults to first recognised extension ignoring "test")
6)shell.php.xxxjpg (still ends in .jpg, but not recognised extension so will default to php!)
7).phtml (a commonly used php parsed extension often forgotten about!)
8).php3/.php4/.php5 (valid PHP extensions possibly left out of extension blacklists)
------------------------------------------------------------------------------------------------------------
Thanks for watching guys ^_^
-----------------------------------------------------------------------------------------------------------
This tutorial is for knowledge purpose only. I will be not responsible for any harm
------------------------------------------------------------------------------------------------------------
