diff --git a/Upload Insecure Files/README.md b/Upload Insecure Files/README.md index ed537da..1ffa55c 100644 --- a/Upload Insecure Files/README.md +++ b/Upload Insecure Files/README.md @@ -66,6 +66,7 @@ Coldfusion: .cfm, .cfml, .cfc, .dbm * `Content-Type : image/png` * `Content-Type : image/jpeg` - [Magic Bytes](https://en.wikipedia.org/wiki/List_of_file_signatures) + Sometimes applications identify file types based on their first signature bytes. Adding/replacing them in a file might trick the application. ### Picture upload with LFI