CTF para-code

para-code

web

cyberedu

I do not think that this API needs any sort of security testing as it only executes and retrieves the output of ID and PS commands.

This php code filters any command given and imposes the size of the command to be less than 5.

After testing multiple possible commands the one that works is m4

m4 *

CTF{791b21ee6421993a8e25564227a816ee52e48edb437909cba7e1e80c0579b6be}