vhp security assessment benign upload probe - no shell, no sensitive content