Other techniques
- arbitrary file uploads and limited file uploads and more now
Injections in File name
- if a filename is being displayed (reflected) on a page OR if it is executed by the OS.
- we can try and upload a malicious string
- For example:
Upload Directory Disclosure
Windows-specific Attacks
|,<,>,\*, or?- https://en.wikipedia.org/wiki/8.3_filename
