← back to room
RCE

StockPulse — Inventory check

Scenario

StockPulse checks inventory by passing your product id into a shell curl command. Special shell characters may run a second command after the intended one. Read the contents of flag.txt on the simulated server.

Your approach

  1. Submit a normal numeric product id and observe output.
  2. Append a command separator followed by a read command for flag.txt.
  3. Confirm flag text appears in the command output area.
  4. Submit the RCE flag from the response.
Warehouse inventory tool

Check stock

Enter a product id. The server fetches stock from an internal service.