DVWA - File upload
Send files to get some shells
Send files to get some shells
Direct access to hidden assets
Manipulate your targets
Find the password
Extract the database by changing your username
Think outside the box when passing parameters
Discover how third party code can get you pwned