This challenge is unreasonable. Someone please try implementing the backend of this challenge in PHP. Then he will realize that the challenge is far-fetched.

Super easy Command Injection.

good

I thought this was some PHP Injection because of the x-powered-by header. Turns out I was wrong.

tutorial on youtube aristorangga

nice

was really easy awnser = ctf{watch_0ut_f0r_th3_m0ng00s3}

dont show it brother u will get banned

Hint: The calculations are not done in the browser, it's done by a POST request

its a easy , some hints : - inspect elements can show more than you know . - its send inputs without filtering , send something more usual for Linux users .

agree 100%

İts protected pls help

that's true, bro.

that's true, bro.