Directory:    

Try these injections

DirectoryResult
.Show contents of default working directory
. & whoamiShow contents & identify user
. & echo HELLO > uploads\hello.htmShow contents & write to this file:
https://win.samsclass.info/uploads/hello.htm

Posted 10-16-18 by Sam Bowne
Ported to vultr 10-3-19
Background color changed 1-18-23