← back to the grid
webmedium

Command Injection

HEMLEM Network Tools has a ping utility that passes the host directly into a shell command. The semicolon has other plans.

sandbox · allow-scripts · no-same-origin · null-origin● live

practice grid — every target is a toy in your own browser. this is not an invitation to test the real site.

enter flag