Collaborate Disseminate
$_FILES[‘userfile’][‘type’] == "image/gif"
There is a problem to choose not only image.gif but whatever name is, such as *.gif . And, if it is possible, can you share some regex expressions for all names and especially image ext… Continue reading How to choose specific file names in php code? [migrated]
There are tons of exploits being created using the PDF file format for most PDF viewers out there every year. PDF files have lots of power and can utilize things such as JavaScript. This is really good but comes with the cost that there is… Continue reading What PDF file format alternative should I choose if I am looking for more security in my document files? [closed]
Let’s say that I have been sent some maliciously-crafted audio files by an attacker that use an unpatched security exploit somewhere in my system to compromise it. How can I reprocess the actual audio (or image, or text etc.) content of su… Continue reading Ensuring that non-executable files are not malicious
Let’s say I have the following PHP code:
<?php
echo file_get_contents($_GET[‘path’] . ".txt");
Obviously, it’s insecure as path traversal is possible when passing e.g. ../../file as a GET parameter.
But is there any way f… Continue reading Can string concatenation in file_get_contents() be exploited in PHP?
When opening a corrupt Microsoft Office document, I get a prompt that says something along the lines of:
Excel [or Word/PowerPoint/etc] has found unreadable content on ‘filename.xslx’. Do you wish to recover the contents of this docume… Continue reading How can I be attacked by opening a corrupt MS Office document?
Packed an AutoHotkey script with ahk2exe using MPress, got 13 hits on the VirusTotal online scan for the zipped result. Packed the same script with the same ahk2exe without MPress and got just 6 hits on the zipped result. Zip performed wit… Continue reading Why is VirusTotal "unable to process file type" for files packed with Mpress?
I just recieved some generic work related mail with word file attached that was requesting to Enable Editing in order to view its content. I’m not going to fall for it but it got me wondering. What could possibly happen to my… Continue reading Possible dangers of .doc files
A recent bug in Android allows a hacker to execute code that is contained within an image file. Here is the quote from the Android Security Bulletin,
The most severe vulnerability in this section could enable a remote
a… Continue reading How does an OS execute code from a PNG file?
Is it possible for a download to specify it’s own icon (as a file in the GUI)?
So for example, if I download a file called foo.cmd can I make it show up (in the download bar or in the explorer) as a video.
I’m asking for Mac… Continue reading Can I file download server specify what logo the file will have on the user’s computer?
This article will help you understand which are the most used malicious files to infect Windows computers to date and will give you tips to increase your malware protection. Antivirus institutes, like AV-TEST register approximately 400 000 new malware … Continue reading Most Popular Windows File Types Used by Malware (2018)