Official Doctor Discussion

I’ve got access to DSM by updating my h___s file. I’m testing out sending messages but I’m not sure if I need to exploit S__I or X__? Is anyone able to send me a nudge in the right direction? Bit of a noob

Edit: Got successful X__ injection on a____ page… what am i missing?

Landed a shell. My advice: img src r**e sl

rooted. User was relatively easy, root is also not too challenging with a bit of google for that pesky one that blocked you at the start.