OS Injection

In this challenge, you’ve discovered a web application that takes user input and executes an OS command on the server without proper validation or sanitization. The application is vulnerable to OS command injection, where user input is directly passed to the operating system’s command shell. Your goal is to exploit this vulnerability to execute arbitrary OS commands and retrieve the flag stored on the server.

OS Command Injection, also known as Shell Injection, occurs when an attacker is able to inject and execute arbitrary operating system commands through a vulnerable web application or service. This happens when user input is improperly sanitized and is directly passed to the system’s shell for execution, allowing the attacker to gain control of the system and execute commands that could compromise the server or reveal sensitive data.