diff --git a/pentesting-web/file-upload/README.md b/pentesting-web/file-upload/README.md
index a4dd5d98f..d79cee0c3 100644
--- a/pentesting-web/file-upload/README.md
+++ b/pentesting-web/file-upload/README.md
@@ -184,7 +184,8 @@ Note that **another option** you may be thinking of to bypass this check is to m
 * [https://github.com/modzero/mod0BurpUploadScanner](https://github.com/modzero/mod0BurpUploadScanner)
 * [https://github.com/almandin/fuxploider](https://github.com/almandin/fuxploider)
 * [https://blog.doyensec.com/2023/02/28/new-vector-for-dirty-arbitrary-file-write-2-rce.html](https://blog.doyensec.com/2023/02/28/new-vector-for-dirty-arbitrary-file-write-2-rce.html)
-
+## Tools
+  * [Upload Bypass](https://github.com/sAjibuu/Upload_Bypass) is a powerful tool designed to assist Pentesters and Bug Hunters in testing file upload mechanisms. It leverages various bug bounty techniques to simplify the process of identifying and exploiting vulnerabilities, ensuring thorough assessments of web applications.
 ## From File upload to other vulnerabilities
 
 * Set **filename** to `../../../tmp/lol.png` and try to achieve a **path traversal**