webeasy

Ping me

spbctf

Task: Ping service with user input passed to shell command. Solution: Command injection via semicolon chaining (;) to bypass WAF and read /flag.

$ ls tags/ techniques/
command_injectionshellwaf_bypassping
waf_bypasssemicolon_command_chaining
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]