Skip to content

Commit dc33caa

Browse files
authored
Merge pull request #781 from stenzzor/patch-1
Update README.md
2 parents 3fd2f8c + d168ded commit dc33caa

File tree

1 file changed

+1
-1
lines changed
  • Upload Insecure Files/Configuration Apache .htaccess

1 file changed

+1
-1
lines changed

Upload Insecure Files/Configuration Apache .htaccess/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
# .htaccess
22

33
Uploading an .htaccess file to override Apache rule and execute PHP.
4-
"Hackers can also use “.htaccess” file tricks to upload a malicious file with any extension and execute it. For a simple example, imagine uploading to the vulnerabler server an .htaccess file that has AddType application/x-httpd-php .htaccess configuration and also contains PHP shellcode. Because of the malicious .htaccess file, the web server considers the .htaccess file as an executable php file and executes its malicious PHP shellcode. One thing to note: .htaccess configurations are applicable only for the same directory and sub-directories where the .htaccess file is uploaded."
4+
"Hackers can also use “.htaccess” file tricks to upload a malicious file with any extension and execute it. For a simple example, imagine uploading to the vulnerable server an .htaccess file that has AddType application/x-httpd-php .htaccess configuration and also contains PHP shellcode. Because of the malicious .htaccess file, the web server considers the .htaccess file as an executable php file and executes its malicious PHP shellcode. One thing to note: .htaccess configurations are applicable only for the same directory and sub-directories where the .htaccess file is uploaded."
55

66
## Summary
77

0 commit comments

Comments
 (0)