Skip to content

Commit

Permalink
Add files via upload
Browse files Browse the repository at this point in the history
  • Loading branch information
Julian Horoszkiewicz authored Jul 15, 2017
1 parent 45ab843 commit 8b09b68
Showing 1 changed file with 11 additions and 0 deletions.
11 changes: 11 additions & 0 deletions BappDescription.html
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
<p>This extension provides a customizable payload generator, suitable for
detecting a variety of file path vulnerabilities in file upload and download
functionality:</p>
<ul>
<li>File upload vulnerable to path traversal with the upload directory located inside the document root.</li>
<li>File upload vulnerable to path traversal with the upload directory outside the document root.</li>
<li>File upload not vulnerable to path traversal, but having the upload directory is inside of the document root, with no direct links to the uploaded file exposed by the application.</li>
<li>Local file inclusion/arbitrary file read vulnerable to path traversal with non-recurrent filters involved.</li>
</ul>
<p>More information, including the code and usage examples can be found at <a href="http://github.com/ewilded/psychoPATH">http://github.com/ewilded/psychoPATH</a></p>

0 comments on commit 8b09b68

Please sign in to comment.