← back to room
RCE
StockPulse — Inventory check
Scenario
StockPulse checks inventory by passing your product id into a shell curl command. Special shell characters may run a second command after the intended one. Read the contents of flag.txt on the simulated server.
Your approach
- Submit a normal numeric product id and observe output.
- Append a command separator followed by a read command for flag.txt.
- Confirm flag text appears in the command output area.
- Submit the RCE flag from the response.
StockPulse
Warehouse inventory tool
Check stock
Enter a product id. The server fetches stock from an internal service.