OWASP Unrestricted File Upload

Repo to help security enthusiasts while testing against unrestricted file upload & test upload of malicious files based on the OWASP documentation.

Webshell

This module aims to reproduce a webshell creation attempt by an attacker. It has the following levels of filter evasion:

Level	Description
1	Change the capitalisation of the extension
2	Change the extensions to a less common extension + Using special trailing characters such as spaces, dots or null characters
3	Level 2 + Additional extension, in case the server cares only about the last extension
4	The opposity logic of the 3rd level. It's used when the server cares only about the first extension in the file name.