Root-MePlatform·File upload - Double extensions·20pts

File upload - Double extensions — Root-Me

Webhard#web#root-me#hard#web-serveur#Web - Server
May 26, 2026

File upload - Double extensions — Root-Me

Root-Me — Web - Server · File upload - Double extensions

For File upload - Double extensions, the backend trusts headers and cookies too much. Notes document forging internal requests, bypassing auth middleware, and reaching a management route.

Comments

Comments are not configured yet.
File upload - Double extensions — Root-Me — Cyber Writeups