> For the complete documentation index, see [llms.txt](https://heapbytes.gitbook.io/notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://heapbytes.gitbook.io/notes/web-security/file-upload-bypass.md).

# File Upload Bypass

## File Upload Bypass -

### Blacklisting Bypass<br>

1. **PHP** → .php, .php2, .php3, .php4, .php5, .php6, .php7, .phps, .phps, .pht, .phtm, .phtml, .pgif, .shtml, .htaccess, .phar, .inc, .hphp, .ctp, .module
2. **ASP** → .asp, .aspx, .config, .ashx, .asmx, .aspq, .axd, .cshtm, .cshtml, .rem, .soap, .vbhtm, .vbhtml, .asa, .cer, .shtml
3. **Jsp** → .jsp, .jspx, .jsw, .jsv, .jspf
4. **Coldfusion** → .cfm, .cfml, .cfc, .dbm
5. **Perl** → .pl, .cgi

Using random capitalization → .pHp, .pHP5, .PhAr

### Whitelisting Bypass

file.png.php\
file.png.Php5\
file.php%20\
file.php%0a\
file.php%00\
file.php%0d%0a\
file.php/\
file.php.\
file.\
file.php....\
file.pHp5....\
file.png.php\
file.png.pHp5\
file.php#.png\
file.php%00.png\
file.php\x00.png\
file.php%0a.png\
file.php%0d%0a.png\
file.phpJunk123png\
file.png.jpg.php\
file.php%00.png%00.jpg