什么是文件上传漏洞 | 如何发现并进行漏洞利用

data-postsbox="{"id":20195,"title":"【零基础学渗透】文件上传漏洞的常见方式汇总","author":"Sec-Labs","author_id":10015,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2022/07/20220718083435408.png","cover_video":"","views":5221,"comment_count":298,"category":"cybersecurity","is_forum_post":false}">{"id":20195,"title":"【零基础学渗透】文件上传漏洞的常见方式汇总","author":"Sec-Labs","author_id":10015,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2022/07/20220718083435408.png","cover_video":"","views":5221,"comment_count":298,"category":"cybersecurity","is_forum_post":false}

data-postsbox="{"id":25390,"title":"【漏洞赏金渗透课程】如何快速找到文件上传支持的扩展名？","author":"FancyPig","author_id":1,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2022/10/20221025021832613.png","cover_video":"","views":2622,"comment_count":4,"category":"knowledge","is_forum_post":false}">{"id":25390,"title":"【漏洞赏金渗透课程】如何快速找到文件上传支持的扩展名？","author":"FancyPig","author_id":1,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2022/10/20221025021832613.png","cover_video":"","views":2622,"comment_count":4,"category":"knowledge","is_forum_post":false}

data-postsbox="{"id":29568,"title":"如何绕过网站的文件上传限制，最终上传webshell","author":"FancyPig","author_id":1,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2023/01/20230103030055270.png","cover_video":"https://v.pigsec.cn/How%20To%20Bypass%20Website%20File%20Upload%20Restrictions_ts.m3u8","views":1759,"comment_count":6,"category":"knowledge","is_forum_post":false}">{"id":29568,"title":"如何绕过网站的文件上传限制，最终上传webshell","author":"FancyPig","author_id":1,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2023/01/20230103030055270.png","cover_video":"https://v.pigsec.cn/How%20To%20Bypass%20Website%20File%20Upload%20Restrictions_ts.m3u8","views":1759,"comment_count":6,"category":"knowledge","is_forum_post":false}

data-postsbox="{"id":32142,"title":"什么是SSRF漏洞 | 如何寻找和利用SSRF漏洞","author":"FancyPig","author_id":1,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2023/02/20230212030457710.jpg","cover_video":"https://v.pigsec.cn/Find%20and%20Exploit%20Server-Side%20Request%20Forgery%20%28SSRF%29_ts.m3u8","views":2499,"comment_count":2,"category":"cybersecurity","is_forum_post":false}">{"id":32142,"title":"什么是SSRF漏洞 | 如何寻找和利用SSRF漏洞","author":"FancyPig","author_id":1,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2023/02/20230212030457710.jpg","cover_video":"https://v.pigsec.cn/Find%20and%20Exploit%20Server-Side%20Request%20Forgery%20%28SSRF%29_ts.m3u8","views":2499,"comment_count":2,"category":"cybersecurity","is_forum_post":false}

data-postsbox="{"id":32869,"title":"失效的对象级授权 (BOLA) 概念解析 | OWASP API TOP 1","author":"FancyPig","author_id":1,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2023/02/20230222022155506.jpg","cover_video":"https://v.pigsec.cn/Broken%20Object%20Level%20Authorization%20%28BOLA%29%20Explained_ts.m3u8","views":1283,"comment_count":0,"category":"cybersecurity","is_forum_post":false}">{"id":32869,"title":"失效的对象级授权 (BOLA) 概念解析 | OWASP API TOP 1","author":"FancyPig","author_id":1,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2023/02/20230222022155506.jpg","cover_video":"https://v.pigsec.cn/Broken%20Object%20Level%20Authorization%20%28BOLA%29%20Explained_ts.m3u8","views":1283,"comment_count":0,"category":"cybersecurity","is_forum_post":false}

data-postsbox="{"id":33652,"title":"什么是NoSQL注入 | 如何挖掘、利用NoSQL注入漏洞","author":"FancyPig","author_id":1,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2023/03/20230309012436321.jpg","cover_video":"https://v.pigsec.cn/Find%20and%20Exploit%20NoSQL%20Injection_ts.m3u8","views":2658,"comment_count":3,"category":"cybersecurity","is_forum_post":false}">{"id":33652,"title":"什么是NoSQL注入 | 如何挖掘、利用NoSQL注入漏洞","author":"FancyPig","author_id":1,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2023/03/20230309012436321.jpg","cover_video":"https://v.pigsec.cn/Find%20and%20Exploit%20NoSQL%20Injection_ts.m3u8","views":2658,"comment_count":3,"category":"cybersecurity","is_forum_post":false}

data-postsbox="{"id":34610,"title":"什么是JSON Web Tokens | 如何针对JWT进行渗透测试","author":"FancyPig","author_id":1,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2023/03/20230331063118715.jpg","cover_video":"https://v.pigsec.cn/Cracking%20JSON%20Web%20Tokens_2_ts.m3u8","views":2090,"comment_count":4,"category":"knowledge","is_forum_post":false}">{"id":34610,"title":"什么是JSON Web Tokens | 如何针对JWT进行渗透测试","author":"FancyPig","author_id":1,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2023/03/20230331063118715.jpg","cover_video":"https://v.pigsec.cn/Cracking%20JSON%20Web%20Tokens_2_ts.m3u8","views":2090,"comment_count":4,"category":"knowledge","is_forum_post":false}