Unrestricted File Upload on the main website for The OWASP Foundation. a RAR file); A malicious file such as a Unix shell script, a windows virus, an Excel file with Upload .exe file into web tree - victims download trojaned executable; Upload virus The list of permitted extensions should be reviewed as it can contain  Dropdowns · Forms · Input group · Jumbotron · List group · Media object · Modal · Navs Using a package manager or need to download the source files?