StockPulse — Host check

Scenario

A network ping tool strips semicolons and ampersands from user input before execution. Other shell metacharacters may still be available. Run a read command on flag.txt despite the filter.

Your approach

1. Test which characters survive the sanitiser in the ping field.
2. Use an allowed operator such as a pipe to chain commands.
3. Pass a host value that runs cat on flag.txt via the pipe.
4. Copy the flag from the combined output.
5. Submit the RCE flag.