sc-file-upload

Detect insecure file uploads by scanning endpoints for unrestricted file types, MIME type mismatches, polyglot files, and webshell patterns to prevent remote code execution and stored XSS risks.

Safe file upload endpoints require server-side validation, randomized filenames, file size limits, executable-permission checks, and storing uploads outside the webroot to block script execution.

Yes, the scanner applies to upload endpoints across Node.js, PHP, Python, and Java frameworks, evaluating storage destinations, naming, size limits, and script execution allowances.

Prevent webshell uploads by enforcing server-side file type validation, checking MIME types, restricting executable permissions, and storing files outside the webroot directory.

Yes, assess web application upload endpoints for unsafe configurations and generate reports of insecure upload patterns directly within CI security pipelines.

A polyglot file is a malicious payload combining multiple file formats to bypass MIME type validation and unrestricted file type checks, which this scanner detects to prevent execution.