Lookup · Glitcher University

DNS / host lookup

Objective Run your own operating-system command via the lookup tool.

💡 Show hint

The host you type is passed to a shell. Chain a command with ; or | — e.g. metadata.internal; cat /tmp/secret/cmd_secret.txt

FlawUser input is concatenated into a shell command (OS command injection). FixNever invoke a shell with user input; pass arguments as a list.