$15,000 bounty : Remote Code Execution via File Upload Vulnerability | POC | Bug Bounty 2023

[@kottunaana]

Thats a great find. Now I will be extra suspicious whenever I see a multipart form.

[@ha5hfl0w51]

With cracked burpsuite xD
nice job !

[@EagleTube1337]

its open source , you analyze from source code right? thats great actually! keep it up.

[@animesdubls]

Can you pls send the payload file to me?

[@abhishekmorla1]

Dm at my social handles

[@brahmareddy5763]

why you add
------------------------------------611111191919101010
that line again in request before php code? explain me bro
and how you exact path themes/huraga/assets ?

[@abhishekmorla1]

ruclips.net/channel/UC9IAh1JN4lhSVz193GvZVZgjoin join

[@littlebitsomething3106]

This all are unique stuff I have been not seeing anywhere. Thanks for sharing. please also share writeupss if available.

[@nivkochan8596]

crazy job!

[@DeepakKumar-ym1wr]

Do they pay bounty right now?

[@abhishekmorla1]

No

[@DeepakKumar-ym1wr]

@@abhishekmorla1 ah i found 1 rce too :/

[@sebastianm8028]

Awesome! Wouldn't have thought to try that, great find!

[@yasaya9139]

where did you learn to add data like this? is there a video covering this for me to learn from?

[@abhishekmorla1]

these techniques are not generally used in the wild , i will keep on uploading such techniques 😉

[@yasaya9139]

@@abhishekmorla1 Is there a discord or telegram group for sharing pentester knowledge?

[@i_am_dumb1070]

​@@yasaya9139 If you found any then share with me plz ❤

[@AyushKumar-rg1uk]

solve ctf challenges and vulnerability labs and read books like web hacking 101

[@noormohammadgagguturi]

Burp professional crack please

[@abhishekmorla1]

join the channel ruclips.net/channel/UC9IAh1JN4lhSVz193GvZVZgjoin

[@Btc_bott]

Show us your hackerone or bugcrowd payments. Dont believe you got paid 15k for this

[@abhishekmorla1]

bugcrowd.com/abhishekmorla

[@MadGaMers1303]

Great Content,I Just learned a new method 😊

[@abhishekmorla1]

Nice

[@webwithmarito4016]

Can ypu share the code source of vulnerable script of this bug please

[@abhishekmorla1]

Join the channel ruclips.net/channel/UC9IAh1JN4lhSVz193GvZVZgjoin

[@shayansec]

how does this happen?? this 'name' directive should contain field name not filename. 'filename' directive should contain file name.

[@abhishekmorla1]

Join The Channel
ruclips.net/channel/UC9IAh1JN4lhSVz193GvZVZgjoin

[@fantashio]

Hi, is there a bug bounty program for fossbilling or the target uses it on their domains?

[@abhishekmorla1]

Target uses

[@steiner254]

Nais

[@entertainment_in_blood]

what was that filename:attacker.php ???
btw Crazyyyy Video..!

[@abhishekmorla1]

rce.php

[@amine988]

Just tell me why you enter/assets

[@abhishekmorla1]

join the channel ruclips.net/channel/UC9IAh1JN4lhSVz193GvZVZgjoin

[@PrashannaGhimire-q6c]

brother can you suggest how do you know the file uploaded path??

[@abhishekmorla1]

Source code

[@likingalllol]

click on that image/file => open in new tab

[@HarshkumarSingh-s3g]

How did you connect it with docker

[@abhishekmorla1]

Through documentation

[@RajuHa-g3m]

this work on foss billing or else where also?

[@abhishekmorla1]

Maybe

[@mayurpatil852]

Bhai aapke pass ke payload mil sakte he kya??? Or kaha se mila he aapko ? Khudase?

[@abhishekmorla1]

Exploit db se

[@mnageh-bo1mm]

this is a mad one

[@monKeman495]

how do you know it stored in asset directory if it's not avail for local environment testing how you know that

[@abhishekmorla1]

Its open source

[@likingalllol]

you see where it will be uploaded

[@seharjamil7345]

That's amazing 😍

[@ritutarun9652]

How to find where is file gone after upload?

[@abhishekmorla1]

Using source code

[@likingalllol]

click on that image/file => open in new tab

[@OussamaBarbar-t8r]

where can i contact you to get the payload file please ?
very good job bro !!!!!!

[@abhishekmorla1]

How about discord?

[@OussamaBarbar-t8r]

@@abhishekmorla1 i send you dm on insta if you dont mind i don't use discord

[@EdGameplayer]

@@abhishekmorla1 pls give me your discord tagname

[@icode780]

awesome

[@adhurealfaz9582]

bhai isme yea kaise pta chla ke file ka path kha hai jo apne traf se bna kr upload ke hai ....?

[@abhishekmorla1]

you can join to learn more
ruclips.net/channel/UC9IAh1JN4lhSVz193GvZVZgjoin

[@panagiotismitkas5526]

Yes but this is a demo you run locally

[@abhishekmorla1]

what else do you expect for open source project ?

[@panagiotismitkas5526]

why do you say then 15.000$ bounty if it is a demo

[@abhishekmorla1]

its not a demo , its poc bro

[@trailersgameplay536]

can i get your discord pls ?

[@abhishekmorla1]

Perhaps you can join the channel ruclips.net/channel/UC9IAh1JN4lhSVz193GvZVZgjoin

[@hackerhacker-t4w]

nice find

[@abhishekmorla1]

Ik