A Flask page that saves uploaded files under uploads/ with the file name the client sends, checking only the extension against a list that includes html.
Pas commencéDockercommit 8c92b01x86_64 · aarch64Secret
Abuse the upload to place a file the application never meant to accept or serve, such as an HTML page with your script or a file outside the upload folder.
Le brief de ce lab se trouve dans son dépôt.