webeasy

ls

spbctf

Task: Directory listing service executing ls with user input, flag in /flag. Solution: WAF bypass using pipe (|) for command chaining since semicolon is blocked.

$ ls tags/ techniques/
command_injectionshellwaf_bypasspipe
pipe_command_chainingwaf_bypass
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]