@federella said:
stuck with the upload form, tried different approaches (using just magic, concatenating two files) but can’t get RCE, let alone a reverse shell! a nudge would be appreciated
You can get a good example of how to bypass this by googling what you are trying to do and going to a gitbook page.
Ideally you want to be uploading an actual valid image.