← All Challenges
Challenge 32 of 66
Shell Shock
🟠 Hard
Injection
+100 XP
A web tool runs ping on user-supplied input. The input is not sanitized. Inject an OS command to read /etc/flag.
Try appending ; or | followed by a command like cat /etc/flag.
🏆 Challenge Complete!
Know someone who would enjoy this? Challenge them.
Keep going
Make it count.
Join free to earn XP for what you read and solve, keep a streak, and track your progress.
Join free