Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Web-14. Command Injection in a Network Diagnostic Tool
Mission
This app is a diagnostic tool that runs ping against a host you supply. If the host input is passed straight into a shell command, what could go wrong?
Hints
Hint 1 Show
Consider whether your input is passed directly into a shell command
Hint 2 Show
Shells support chaining commands with `;`, `&&`, `|`, etc.
Hint 3 Show
Try appending another command after the ping target host