cspshivam/playground
Modern Level 2 / 14 Medium
← All labs

OS Command Injection

A diagnostics tool shells out to probe a host. Ride the command it builds and run your own.

Network diagnostics

This tool runs a quick connectivity check against your device. Your client IP is auto-detected from the request — there is nothing to type. There is a flag.txt in the web root.

Client IP (auto-detected)

The address is read from a request header, so the only way to change what gets probed is to alter that header in the request.

$ ping -c 1 216.73.216.233

PING -c 56 bytes: icmp_seq=1 time=0.1 ms

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of CSPSHIVAM Playground is not part of the target.