Posted by Nahuel Grisolia on Jun 24
List,
Imagine that you're in front of an """"insecure"""" file upload in the
context of an IIS6,7 (no ;.jpg :P) and the regex filtering the file is like:
[anything].asp[anything] (yeah, my.aspirator.jpg is filtered hehe)
No .aspx, no .asp and no .aspx;jpg even if the server is vulnerable…
So… is there any way to bypass this control? Like uploading a
malicious Webservice (can we simply upload a…
Source: ASHX, ASMX or What?
