Well honestly, it appears testing is happening on this same site. I was just fucking around and without too much XSS, here's a link to go look at: http://silkroad5v7dywlc.onion/img.jpg You can substitute anything after the forum URL so long as it contains an extension that PHP will recognize. Whats more, check out the HTML header: I really just want to see what you guys do with it...