Ok now though we can bypass the checking for the file type.
Let's see if we can bypass it.
When we increased the security level too high.
So again I'm gonna say this and I'm going to go to the website settings here and DVD-Video hey.
And as you can see now this is still running.
So it's intercepting every packet I'm going to click this to turn it off so I can browse the internet
normally and I'm going to go on.
I'm going to submit that.
And now that's our goal.
So the security level now is high.
I'm going to go to my file upload.
I'm going to try to upload a normal image just to make sure that nothing broke.
Like we did before.
So we're going to upload the image
and as you can see we can upload GBG extensions.
So I'm going to turn on my interceptor again so I can see what's happened.
And I'm going to try to upload my shell right here.
JP you like I did in the previous video.
I'm going to click on upload and I'll just try the method we tried before and see if that works.
So in the previous method the target computer or the target server was checking the file type is an
image.
So when we call our file GBG and was only checking if the content type is an image.
So when we come here and change this to page we and forward this packet the upload used to go through.
Now you can see that it's telling us that the image was not uploaded.
So it's probably in that the extension is GPDA as well.
So I check in the file type and the extension so we can bypass the file type like we did before but
now is checking for the extension so we can't really bypass it that way.
So what we're going to do is we're going to do a trick that I'll show you now.
So I'm just going to upload the file again same files show other AJP and going to click on upload what
it's doing.
Right now it's checking out the content type is an image that JPEG which is perfect.
That's cool.
We can do that.
We bypass our last line.
Well it's also checking this time it's probably we don't know but we're assuming that it's also checking
that the file type is that JP G at the end.
So when you're changing that to to those BHB everything is broken because it's expect an adult puji
file or that PFG.
So that's expected an image extension.
So we're going to do is we're going to do that ph we dart GBG.
So we're going to call the files show that BHB that GBG this way it's going to check if the last thing
is that our GPDA and it's going to think that it is a dodgy speed you can upload it to us then we're
going to browse it like a page file and it should work for us.
So I'm going to call this shell to or actually we'll call each other three.
So the only thing we modify now is we modify the filename in here to shell 3 ph we don't GBG I'm going
to forward this packet.
And as you can see now the file has been uploaded successfully.
Now I'm going to go back to my have here and the last file we interacted with was called shell to that
BHB.
This time our file is called Scheldt 3.0 ph really Daut GBG enter.
As you can see we managed to connect to to upload a Ph.D. file and executed on the target computer using
word proxy to keep the file type as an image and then we change the file extension to dub GBG to BHP
Dutch JPT which bypassed the file type check as well.
So if I do id Now I can get my ID for Dupee the video of my working directory out of the future we'll
see how we can use Wimbley But for now you can see that we managed to gain access to our target website.