Capture the FlagMedium
Ping the World
Lab for Command Injection: Escaping to the Shell
Scenario
The ping utility is accessible via a web endpoint: `?target=google.com` runs `ping -c 1 google.com`. Test it with a normal input first, then chain a command with `;` to read a sensitive file and find the flag.
Objective
Prove the ping endpoint is vulnerable to command injection, then chain commands to read a file.
lab ~ ping the worldnothing real runs
booting lab sandbox…
This sandbox is fully emulated in your browser, nothing real runs and nothing leaves your machine. Type help to see the tools available.