Day 7: OS Command Injection

New OWASP category today: Command Injection. One clean solve, one long, genuinely exhausting debugging session that ended without a final clean win — and a good closing tangent connecting all of this