webshells reviews and mentions

• The Instant Ramen Guide to Hacking for Radicals
  1 project | /r/PraxisGuides | 11 Apr 2021

  File Upload Shelling - Every defacer knows this method. You go to a target site, you use something like dirbuster to find the file upload page (I use web proxy like zaproxy because it's quicker), if you are lucky the upload form can allow any file, you can just upload the correct webshells for the right web-app. But most of the time you will encounter something like an image upload, which can be easily solved by adding an image header to your webshell. File upload shelling is often used along side with SQLi to gain access to server backend, because once you have a shell up you can do practically anything.