Upload Filtering Bypass

1: Extension Validation (Blacklist/Whitelist)

2: File type filtering

MIME validation (Content-Type: <file/file> in request

Magic number validation

3: File length (Webshells)

4: File name filtering (Bad characters, control characters, unicode characters)

5: File content filtering