DVWA-File Upload(Low)

FileUpload(Low)漏洞分析

最新推荐文章于 2025-03-07 21:10:19 发布

原创最新推荐文章于 2025-03-07 21:10:19 发布 · 337 阅读

0 ·

CC 4.0 BY-SA版权

安全专栏收录该内容

35 篇文章

订阅专栏

本文深入分析了FileUpload(Low)代码中存在的文件上传漏洞，详细解释了PHP basename()函数的使用及其潜在的安全风险。文章探讨了漏洞利用的三个关键步骤：成功上传恶意文件、确保文件可执行以及获取上传路径。此外，还提到了如何利用该漏洞上传一句话木马。

文章目录

File Upload(Low)
- 代码分析
- 漏洞利用

File Upload(Low)

代码分析

<?php

if( isset( $_POST[ 'Upload' ] ) ) {
	// Where are we going to be writing to?
	$target_path  = DVWA_WEB_PAGE_TO_ROOT . "hackable/uploads/";
	$target_path .= basename( $_FILES[ 'uploaded' ][ 'name' ] );

	// Can we move the file to the upload folder?
	if( !move_uploaded_file( $_FILES[ 'uploaded' ][ 'tmp_name' ], $target_path ) ) {
		// No
		$html .= '<pre>Your image was not uploaded.</pre>';
	}
	else {
		// Yes!
		$html .= "<pre>{$target_path} succesfully uploaded!</pre>";
	}
}

?>