-
Notifications
You must be signed in to change notification settings - Fork 1
/
file-upload-pages.html
147 lines (115 loc) · 5.22 KB
/
file-upload-pages.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
<!DOCTYPE html>
<!--[if lt IE 7]> <html class="no-js lt-ie9 lt-ie8 lt-ie7" lang="en"> <![endif]-->
<!--[if IE 7]> <html class="no-js lt-ie9 lt-ie8" lang="en"> <![endif]-->
<!--[if IE 8]> <html class="no-js lt-ie9" lang="en"> <![endif]-->
<!--[if gt IE 8]><!--> <html class="no-js" lang="en"> <!--<![endif]-->
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width" />
<title>OWASP Bricks File upload pages</title>
<!-- Included CSS Files (Uncompressed) -->
<!--
<link rel="stylesheet" href="stylesheets/foundation.css">
-->
<!-- Included CSS Files (Compressed) -->
<link rel="stylesheet" href="stylesheets/foundation.min.css">
<link rel="stylesheet" href="stylesheets/app.css">
<link rel="icon" href="favicon.ico" type="image/x-icon">
<script src="javascripts/modernizr.foundation.js"></script>
<!-- IE Fix for HTML5 Tags -->
<!--[if lt IE 9]>
<script src="http://html5shiv.googlecode.com/svn/trunk/html5.js"></script>
<![endif]-->
<link href='http://fonts.googleapis.com/css?family=Open+Sans' rel='stylesheet' type='text/css'></head>
<body>
<!-- Header and Nav -->
<div class="row">
<div class="three columns">
<h1><a href="index.php"><img src="images/bricks.jpg" /></a></h1>
</div>
<div class="nine columns">
<ul class="nav-bar right">
<li><a href="index.php">Home</a></li>
<li class="has-flyout">
<a href="bricks.html">Bricks</a>
<a href="bricks.html" class="flyout-toggle"><span> </span></a>
<ul class="flyout">
<li><a href="login-pages.html">Login pages</a></li>
<li><a href="file-upload-pages.html">File Upload pages</a></li>
<li><a href="content-pages.html">Content pages</a></li>
</ul>
</li>
<li><a href="config/">Setup</a></li>
<li><a href="about.html">About</a></li>
</ul>
</div>
</div>
<!-- End Header and Nav -->
<div class="row">
<div class="twelve columns">
<h4>File Upload pages</h4>
<p>Each file upload page has its own security mechanisms. Some pages allows you to upload only some specific picture files. Your mission is to break them, upload shell scripts, execute them and gain access.<br/>
</p>
<a href="upload-1/"><div class="three columns"><img class="hide-for-small" src="images/upload.jpg"/>
<div class="panel">
<h5>Upload #1</h5>
Simple file upload.
</div>
</div>
</a>
<a href="upload-2/"><div class="three columns"><img class="hide-for-small" src="images/upload.jpg"/>
<div class="panel">
<h5>Upload #2</h5>
Content type verification
</div>
</div>
</a>
<a href="upload-3/"><div class="three columns"><img class="hide-for-small" src="images/upload.jpg"/>
<div class="panel">
<h5>Upload #3</h5>
Extension verification
</div>
</div>
</a>
</div>
<!-- Footer -->
<footer class="row">
<div class="twelve columns">
<hr />
<div class="row">
<div class="six columns">
<p><a href="http://sechow.com/bricks/" target="_blank">OWASP Bricks</p>
</div>
<div class="right">
<a href="http://www.facebook.com/OWASPBricks" target="_blank"><img src="images/Facebook.png"/></a> <a href="https://twitter.com/OWASPBricks" target="_blank"><img src="images/Twitter.png"/></a> <a href="https://sourceforge.net/p/owaspbricks/" target="_blank"><img src="images/Sourceforge.png"/></a> <a href="https://www.owasp.org/index.php/OWASP_Bricks" target="_blank"><img src="images/owasp.png"/></a> <a href="http://gplus.to/OWASPBricks" target="_blank"><img src="images/Google+.png"/></a> <a href="https://www.youtube.com/OWASPBricks" target="_blank"><img src="images/YouTube.png"/></a> <a href="http://owaspbricks.blogspot.com/" target="_blank"><img src="images/Blogger.png"/></a>
</div>
</div>
</div>
</footer>
</div>
<!-- Included JS Files (Uncompressed) -->
<!--
<script src="javascripts/jquery.js"></script>
<script src="javascripts/jquery.foundation.mediaQueryToggle.js"></script>
<script src="javascripts/jquery.foundation.forms.js"></script>
<script src="javascripts/jquery.foundation.reveal.js"></script>
<script src="javascripts/jquery.foundation.orbit.js"></script>
<script src="javascripts/jquery.foundation.navigation.js"></script>
<script src="javascripts/jquery.foundation.buttons.js"></script>
<script src="javascripts/jquery.foundation.tabs.js"></script>
<script src="javascripts/jquery.foundation.tooltips.js"></script>
<script src="javascripts/jquery.foundation.accordion.js"></script>
<script src="javascripts/jquery.placeholder.js"></script>
<script src="javascripts/jquery.foundation.alerts.js"></script>
<script src="javascripts/jquery.foundation.topbar.js"></script>
<script src="javascripts/jquery.foundation.joyride.js"></script>
<script src="javascripts/jquery.foundation.clearing.js"></script>
<script src="javascripts/jquery.foundation.magellan.js"></script>
-->
<!-- Included JS Files (Compressed) -->
<script src="javascripts/jquery.js"></script>
<script src="javascripts/foundation.min.js"></script>
<!-- Initialize JS Plugins -->
<script src="javascripts/app.js"></script>
</body>
</html>