duanjuan3931 2019-08-18 12:58
浏览 63

为什么Exif shell有效负载没有在浏览器中执行?

I am working on "DVWA" vulnerability lab and currently i am little stuck at one issue. I have inserted the php code to image metadata through exiftool and i have successfully uploaded the image with the extension "image.php.jpeg" but when i am loading the image in the browser the php payload not executing it's directly rendering the image.

Exif Paylod

exiftool -DocumentName="<h1>Hello World<br><?php phpinfo();?></h1>" image.jpeg

URL

http://localhost:8080/dvwa/hackable/uploads/image.php.jpeg

I have seen in many tutorials the above payload working fine but in my browser both (Chrome and Firefox) it's not working.

Please follow this tutorial video :- https://www.youtube.com/watch?v=nNB9XlRfvzw&t=323s

i followed the exact same steps but only thing is at last when i am loading the image in the browser the exif is not loading it's simply showing the image.

Question, is the browser restricting the exif data or something wrong with my payload.

Please help me out

Thanks

  • 写回答

0条回答

    报告相同问题?

    悬赏问题

    • ¥15 素材场景中光线烘焙后灯光失效
    • ¥15 请教一下各位,为什么我这个没有实现模拟点击
    • ¥15 执行 virtuoso 命令后,界面没有,cadence 启动不起来
    • ¥50 comfyui下连接animatediff节点生成视频质量非常差的原因
    • ¥20 有关区间dp的问题求解
    • ¥15 多电路系统共用电源的串扰问题
    • ¥15 slam rangenet++配置
    • ¥15 有没有研究水声通信方面的帮我改俩matlab代码
    • ¥15 ubuntu子系统密码忘记
    • ¥15 保护模式-系统加载-段寄存器