Endolum CTF - command-injection

Difficulty: easy Category : web Author : xnull Description : ### Network Diagnostic Tool This web tool lets you ping any server to check if it's reachable. The tool runs the ping command on the server and shows you the output. The flag is stored in `/flag.txt` on the server. Solution We can just get the flag with simple command injection in the ping functionality: