Realist

Just a message to prevent other people wasting time on this:

Despite the category this challenge is posted in, this challenge is FAR from realistic. The upload does not function as a normal upload and will always return: ’Does not seem interesting, removing it.’ when uploading normal images. You will never be able to upload normal images, so don’t try. Go straight for a bypass and the underlying script will give you the flag. Pretty lame.

To clarify: It is so unrealistic, you never have to delete a file. Just pretend you want to get full access to the box.

I was at the upload stage and validated the challenge. Have to say I like the SQL injection part but not the upload part.

Yep me too