Skip to main content

CMD injection

Shell single quote

For

date '$FORMAT'

FORMAT

'; cat /flag'

Gives

date ''; cat /flag''