(Reprinted) Use burp suite to cut off the upload and get the shell

The filepath parameter must be set for burpsuite upload.

 

Step 1: select a JPG suffix.

Step 2: Set the local proxy. The local port of burp is 8080.

Step 3: Open burp suite and click graph.

Step 4: Click Upload and the form uploaded at the same time will be sent to the burp. Click send to repeater in action and the repeater will become red.

Step 5: Modify the form. Note that there is a space behind yueyan. Asa in the image.

Step 6 hangs the hex. The hex record is almost a hex encoded number.

Step 7: Change the hexadecimal 20 of the space to 00

Step 8: view the shell path.