About
Engineering leader with experience in leading companies to both acquisitions and IPOs.…
Articles by Adam
Contributions
-
What are the common pitfalls and mistakes when implementing file upload features in web applications?
In systems where the original file name is used in the converted file name, it often becomes possible to find an input that both supports file upload (e.g., photos, avatars, videos, etc.) and uses some kind of command line shell (e.g., ImageMagick, ffmpeg, etc.) to process the file. In these cases, uploading a file with a name similar to "; linuxcommand -param; imagemagick .jpg" would allow you to execute commands such as Netcat and create reverse shells. Since often these scripts need escalated permissions to run, the shell will be created with elevated permission too. I recommend using a hash algorithm and then doing a manipulation on the result to ensure a directory structure without hash collisions and limited files per directory.
Experience
Licenses & Certifications
Projects
-
AWOL's Rap Up!
A weekly series I'm doing on Jam.ai, giving bite-sized raps about leadership and engineering topics.
-
Photoshop 25th Anniversary Tribute
-
To celebrate the 25th anniversary of Adobe Photoshop, we created a rich content marketing experience to tell a story that parallels that of Photoshop: The history of learning and exploring the toolsets of one of the most popular and prolific creative software programs ever made.
The project spanned four months and involved coordination between an outside creative agency to build the microsite as well as over three dozen internal stakeholders across content, production, engineering…To celebrate the 25th anniversary of Adobe Photoshop, we created a rich content marketing experience to tell a story that parallels that of Photoshop: The history of learning and exploring the toolsets of one of the most popular and prolific creative software programs ever made.
The project spanned four months and involved coordination between an outside creative agency to build the microsite as well as over three dozen internal stakeholders across content, production, engineering, creative, display acquisition, engagement and product marketing.
The site exceeded all goals by reaching over 2 million impressions within the first 30 days.Other creatorsSee project
Recommendations received
1 person has recommended Adam Join now to view
Other similar profiles
Explore collaborative articles
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
Explore MoreOthers named Adam Wolkov
2 others named Adam Wolkov are on LinkedIn
See others named Adam Wolkov