fileGPS: HTTP filename upload guesser
fileGPS
When you upload a shell on a web-server using a file upload functionality, usually the file gets renamed in various ways in order to prevent direct access to the file, RCE and file overwrite.
fileGPS is a tool that uses various techniques to find the new filename, after the server-side script renamed and saved it.
Some of the techniques used by fileGPS are:
- A various hash of the filename
- Various timestamps tricks
- Filename + PHP time() up to 5 minutes before the start of the script
- So many more
Features
- Easy to use
- Multithreaded
- HTTP(s) Proxy support
- User-agent randomization
- Over 100.000 filenames combinations