webeasy

Grep It All

spbctf

Task: Command injection with output filtered through grep showing only digits. Solution: Use shell comment character (#) to cut off the grep filter and get full output.

$ ls tags/ techniques/
command_injectionshellwaf_bypassshgrepcomment
shell_comment_injectionoutput_filter_bypass
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]