Enzai__x [extra Quality] -

/admin (200) /uploads (403) → directory listing disabled, but “upload.php” exists /debug (200) → shows a PHP info page (phpinfo())

Visit the uploaded URL in a browser or curl it: enzai__x

Result: