Uploading a Reverse Shell to a Web Server in Kali Linux - GeeksforGeeks
How to Hack a Web Server
Comprehensive Guide on Unrestricted File Upload - Hacking Articles
Module "WEB requests". To get the flag, use cURL to download the file returned by '/download.php' in the above server - Academy - Hack The Box :: Forums