command-injection-1

127.0.0.1"; “Commands such as ls, pwd, and env work well, so if you check the Python version and enter Python3 flag.py, an error is output. I'm wondering if the approach is wrong... haha

How do I bypass and issue a command? I'm a complete rookie. ^^;;;

There are many people who say it's easy when you read the comments... Hmm... I just don't know. (Rookie Wang) There are comments saying that you only need to know the basics of Linux commands, and that double quarters are important. Can you give me a little more hint? I don't know, huh huh

I solved it while watching the lecture. Why do you put “and the last #는 after the IP? In particular, “doesn't even appear at the beginning, so I don't know why it's included.

I know that in a double quarter, “can be interpreted I sent it with `echo 127.0.0.1 && /bin/sh -c cat flag' filled like this The ping value is output properly, but I can't output anything because of the problem with the command after the flag (I don't know much about Linux commands) Please give me some advice, experts

At first, the ping field only had 8.8.8.8 How did you come up with the idea of adding 127.0.0.1? I was grumbling because I couldn't even approach them, and eventually I was able to approach them one by one by one by looking at the answer sheets on Naver. I felt like I was getting too far away and going to the mountains I feel it every time I solve a problem. How can I approach it in a slightly closer way to get closer to the correct answer?

In the course, it is said that if host = '8.8.8.8"; ls #', cmd = 'ping -c 3 “8.8.8.8" ls#" 'will have a string. Isn't that #는 commenting? Why are you putting it at the end? To solve this problem, use the ls or cat command, but if you write #를 at the end, you'll see the answer, but if you don't use #를, an error occurs while exe

I tried to delete the pattern format from the developer tool that comes up when I press f12, but after deleting and refreshing, ping! There is no change even if you press the button, and you can just reconnect to the original page. I kept trying but it didn't work, please help.. haha

Hello, I'm posting a question because I couldn't solve it even after trying to search and follow 8.8.8.8"; "ls 8.8.8.8"; cat "flag.py And so on, I can't follow the methods on the internet, but why can't I... host=8.8.8"; “cat” “flag.py I'm just asking you to at least match the answer to the requested format. Please help.. ! [image.png] (http

I wanted to solve it without using a proxy, so I modified it in the developer tools, but it didn't work. Isn't the way to edit it is to create a new file by overriding it from the source and saving it??