Test files › Images › fake-jpeg-is-executable.jpg
Sample JPEG file
A file named .jpg whose magic bytes are the DOS/PE "MZ" signature. Contains no executable code - just the header and filler.
↓ Download fake-jpeg-is-executable.jpg| Filename | fake-jpeg-is-executable.jpg |
| Format | JPEG (spoofed) |
| Size | 2.1 KB (2,131 bytes) |
| MIME type | image/jpeg |
| SHA-256 | 4ba83fec93b79c99a1d2f2be5e10620d7ca634766d5a783a8d9a7a19c47d610f |
What this file catchesUpload validation that trusts the file extension or the client-supplied Content-Type instead of sniffing actual magic bytes. This is the number one file-upload bypass.
Download & verify
curl -fsSL -o "fake-jpeg-is-executable.jpg" "https://files.hexaqa.com/image/fake-jpeg-is-executable.jpg"
curl -fsSL "https://files.hexaqa.com/image/fake-jpeg-is-executable.jpg" | sha256sum
# expect: 4ba83fec93b79c99a1d2f2be5e10620d7ca634766d5a783a8d9a7a19c47d610f