File Upload Vulnerability 5 | Web Shell Upload via Obfuscated File Extension

[@mohammedanas2722]

Dear Amazing hacker, Thanks for the tutorial,
how we can get the token or code in burpsuite only

[@HMCyberAcademy]

If you followed same steps in this tutorial, then you can get the code in burpsuite like this:
Select any GET request from the same website.
Send it to repeater.
Change the endpoint (or URL) to "/files/avatars/virus.php" and send it.