Dev0ops hints

I have user.txt and can read files, but can’t seem to format my upload to do any sort of remote code execution. OWASP reading helped but their example code isn’t working for me. Can anyone PM me a nudge in the right direction? Without being able to list folder contents it’s hard to know what to look for.