I cannot even get a user on this. I already have wasted 5 days, and I have not get the user flag yet. Reading the posts from this topic, I understand that I have to find a secret page that will help me upload my payload. I tried with wfuzz and dirbuster all the wordlists regarding asp.net that I could find, but so far I could not get access. Any hint ?