This is a write-up on how I find and exploit an OS command injection vulnerability on a web server. — Notes I will change the name of the company I will talk about and call it Kings-Landing. There is a short version of the story (TL;DR) & take away sections at the end of the write-up if you want to save yourself 7minutes || don’t have time for my jokes :) …