http://blog.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/HTB/Medium/1.html
[y/N] y As sqlmap takes some time to run, let's head over to the signup page and try to create an account heading over to the uploading page we'll submit some random torrent file : and we have been able to upload it ! Moving over to /torrent/upload we seem to have access to uploaded images : let's change the screenshot to a reverse php png shell : < ?
2 similar results skipped