Command Injection Lab

Challenge Question

An old internal tool exposes a simple network diagnostic page that lets staff ping any IP address to check connectivity. It was built to save the ops team a walk to the server room, but it never stopped to ask whether the input it accepts is really just an IP address. See what else you can get the server to do besides ping.