http://motasem-notes.net/en/?p=1073
Learning the exploitation of file upload vulnerability – Cyberseclabs Engine