duanjuan3931 2019-08-18 12:58
浏览 63

为什么Exif shell有效负载没有在浏览器中执行?

I am working on "DVWA" vulnerability lab and currently i am little stuck at one issue. I have inserted the php code to image metadata through exiftool and i have successfully uploaded the image with the extension "image.php.jpeg" but when i am loading the image in the browser the php payload not executing it's directly rendering the image.

Exif Paylod

exiftool -DocumentName="<h1>Hello World<br><?php phpinfo();?></h1>" image.jpeg

URL

http://localhost:8080/dvwa/hackable/uploads/image.php.jpeg

I have seen in many tutorials the above payload working fine but in my browser both (Chrome and Firefox) it's not working.

Please follow this tutorial video :- https://www.youtube.com/watch?v=nNB9XlRfvzw&t=323s

i followed the exact same steps but only thing is at last when i am loading the image in the browser the exif is not loading it's simply showing the image.

Question, is the browser restricting the exif data or something wrong with my payload.

Please help me out

Thanks

  • 写回答

0条回答 默认 最新

    报告相同问题?

    悬赏问题

    • ¥15 一道python难题
    • ¥15 用matlab 设计一个不动点迭代法求解非线性方程组的代码
    • ¥15 牛顿斯科特系数表表示
    • ¥15 arduino 步进电机
    • ¥20 程序进入HardFault_Handler
    • ¥15 oracle集群安装出bug
    • ¥15 关于#python#的问题:自动化测试
    • ¥20 问题请教!vue项目关于Nginx配置nonce安全策略的问题
    • ¥15 教务系统账号被盗号如何追溯设备
    • ¥20 delta降尺度方法,未来数据怎么降尺度