> For the complete documentation index, see [llms.txt](https://docs.whitehat.nyc/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.whitehat.nyc/tooling/apache.md).

# Apache

Apache

Following this excellent article on ways to bypass upload vulnerabilities

<https://thibaud-robin.fr/articles/bypass-filter-upload/>

We can craft a .htaccess file to bypass uplaods:

`└─$ cat .htaccess`\
`AddType application/x-httpd-php .dork`

This creates an entry for the upload directory with a new, custom filetype under the name \`.dork\`

Now we should be able to upload a shell with a .dork extension and be able to run PHP on the web server!