Polyglots are a combination of two different file types. Applications allow only certain file types on features like file upload and don’t allow other file types like.php or.js files as these can enable the attacker to upload malicious files on the application. Mozilla fixed this in Firefox 51 and after versions.

3m read timeFrom infosecwriteups.com
Post cover image
Table of contents
Exploiting XSS with Javascript/JPEG PolyglotTime for Injection

Sort: