Start free

Browse › Advanced Web Application Exploitation

Web 201 - Lab 4: Advanced OS Command Injection

Part of Advanced Web Application Exploitation Topic: Web Hacking

Counts towardsCompTIA PenTest+ badgeOffSec OSCP badge

Access

Included in StationX Membership — unlimited attempts

🔒 StationX Membership — $299 / year ($24.92/mo billed annually)

Already have access? Sign in.

New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.

What you'll do

In the first part of this lab, we will explore some methods of evading the filters and still accomplishing the goal.

  • In the second part of the lab, we will make the exploit even more difficult by leaving the filters in place as well as removing the output, making it a blind OS Command Injection.

Roadmaps that use this lab