Hmm, among all the vulnerabilities I have learned about till now, I find the file upload vulnerability one of the easiest ones.

I am sure that you have often stumbled upon a feature on websites where you need to (or want to) upload any file.

What is a File?

Now, what do I mean by file? You use social platforms like WhatsApp and Instagram, right? The images you use as your profile pictures, as your posts, or when uploading anything on your WhatsApp status, all of those are files. Your profile picture is a PNG or JPEG file, while the videos are MP4 files.

I know that we call them pictures and videos, but they are actually files with different file extensions that tell the system how to treat them. PNG files? They are viewed. MP4 files? They are played in the form of a video along with audio.

What is File Upload?

Now we know what files are. File upload is when you upload these files on different platforms like WhatsApp and Instagram (basically, we upload the files on…