Offensive Security

File Upload Defense Test Pack

Generate upload-bypass and polyglot test cases for an authorized lab, with optional local artifact type/metadata detection.

file-upload-defense-test-pack4 stepsuploadpolyglotchain

Generates upload-bypass cases (extension tricks, MIME spoofing, magic bytes, .htaccess, ImageMagick/EXIF) for the selected runtime and category, plus a polyglot-file reference set. When you paste an optional artifact, Format Detection and Metadata Reference also run against it locally - kept separate from the generated test cases so a real artifact observation is never confused with a generated test.

Tool chain

  1. File Upload Bypassfile-upload-bypass
  2. Polyglot Payload Generatorpolyglot-payload-generator
  3. Magic Detectormagic-detector - optional
  4. Metadata Extractormetadata-extractor - optional