OS Command Injection
Hard · OS command injection

No Spaces Allowed

A legacy maintenance wrapper blocks literal spaces and common separators, but still invokes `/bin/sh -c` with the resulting string. Shell expansion happens after the filter.

Objective

Demonstrate that shell syntax can recreate a blocked space and still execute the proof command.

Target

NetOps Console

Launch target

Submit flag