Adding an EXE

Don't know why .exe and other files are allowed to be uploaded to the "images section" of the posts where an filter supposed to exist to deny any file that isn't an image. It doesn't show an exe file. However you can still pull said exe from it.

There is still a GET request from this. Also seems like one could use a method of enum for the filenames as nothing is renaming the files once uploaded.

50MB exe data file
https://nicheless.blog/post/50-1

The value listed:

https://d1muf25xaso8hp.cloudfront.net/https://s3.amazonaws.com/appforest_uf/f1671323485263x585811602058493600/50.exe?w=768&h=&auto=compress&dpr=1&q=50&fit=max

CDN Host
https://d1muf25xaso8hp.cloudfront.net/

S3 AWS Bucket
https://s3.amazonaws.com/appforest_uf/f1671323485263x585811602058493600/50.exe

S3 AWS Bucket Main
https://s3.amazonaws.com/appforest_uf/f1671323485263x585811602058493600/

security tech issue problem testing s3 aws

Sign in to like this post.

Share “Adding an EXE”

X Facebook WhatsApp

https://nicheless.blog/post/adding-an-exe

Report this post

What’s wrong? We look at every report within a day.

ReasonSpamAds, scams, or the same thing over and over.AbuseHarassment, hate, threats or harm.Something elseAnything else against the Terms.

A note (optional)

Babyfangs

4 days written
325 words
9 published
0 week streak

JanFebMarAprMayJunJulAugSepOctNovDecJanFebMarAprMayJunJulAugSepOctNovDecJanFebMarAprMayJunJulAugSepOctNovDecJanFebMarAprMayJunJulAugSepOctNovDecJanFebMarAprMayJunJulAugSepOctNov

MonWedFri

A little more from Babyfangs.

Get Babyfangs's writing delivered to your inbox, whenever they choose to send it.

Adding an EXE

Sign in to like this post.

Report this post

More from Babyfangs

More Buckets

50?

big

maybe?

Testing a gif pt2

More from Babyfangs

More Buckets

50?

big

maybe?

Testing a gif pt2