> For the complete documentation index, see [llms.txt](https://0xpthree.gitbook.io/notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://0xpthree.gitbook.io/notes/network-services/ports/80-443-http-s/web-vulnerabilities/upload-bypass.md).
# Upload bypass
## Magic byte + mime type + extension
Confirm that we’re able to upload PDF files:
We are not able to bypass the restriction by changing MIME type and/or file extension:
Bypass by adding `%PDF-1.5` at the start of our payload, changing extension to `.pdf.php` and MIME type to `application/pdf`:
