duanjuan3931 2019-08-18 12:58
浏览 63

为什么Exif shell有效负载没有在浏览器中执行?

I am working on "DVWA" vulnerability lab and currently i am little stuck at one issue. I have inserted the php code to image metadata through exiftool and i have successfully uploaded the image with the extension "image.php.jpeg" but when i am loading the image in the browser the php payload not executing it's directly rendering the image.

Exif Paylod

exiftool -DocumentName="<h1>Hello World<br><?php phpinfo();?></h1>" image.jpeg

URL

http://localhost:8080/dvwa/hackable/uploads/image.php.jpeg

I have seen in many tutorials the above payload working fine but in my browser both (Chrome and Firefox) it's not working.

Please follow this tutorial video :- https://www.youtube.com/watch?v=nNB9XlRfvzw&t=323s

i followed the exact same steps but only thing is at last when i am loading the image in the browser the exif is not loading it's simply showing the image.

Question, is the browser restricting the exif data or something wrong with my payload.

Please help me out

Thanks

  • 写回答

0条回答 默认 最新

    报告相同问题?

    悬赏问题

    • ¥15 delta降尺度计算的一些细节,有偿
    • ¥15 Arduino红外遥控代码有问题
    • ¥15 数值计算离散正交多项式
    • ¥30 数值计算均差系数编程
    • ¥15 redis-full-check比较 两个集群的数据出错
    • ¥15 Matlab编程问题
    • ¥15 训练的多模态特征融合模型准确度很低怎么办
    • ¥15 kylin启动报错log4j类冲突
    • ¥15 超声波模块测距控制点灯,灯的闪烁很不稳定,经过调试发现测的距离偏大
    • ¥15 import arcpy出现importing _arcgisscripting 找不到相关程序