---
title: "Discussion on \"HackTheBox - Command Injections - Skills Assessment Walkthrough\" | Hashnode"
description: "Discussion on \"HackTheBox - Command Injections - Skills Assessment Walkthrough\". Scenario\nYou are contracted to perform a penetration test for a company, and through your pentest, you stumble upon an interesting file manager web application. As file managers tend to execute system commands, you are interested in testing for comma..."
url: "https://hashnode.com/posts/hackthebox-command-injections-skills-assessment-walkthrough/68837394e4fa7438d2dc710a"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [HackTheBox - Command Injections - Skills Assessment Walkthrough](https://id0xa.hashnode.dev/hackthebox-command-injections-skills-assessment-walkthrough?utm_source=hashnode&utm_medium=feed)

Scenario You are contracted to perform a penetration test for a company, and through your pentest, you stumble upon an interesting file manager web application. As file managers tend to execute system commands, you are interested in testing for comma...

Jul 25, 2025 · 2 min read · id0xa.hashnode.dev  
Read the article

-   [#command-injection](https://hashnode.com/tag/command-injection)
-   [#hackthebox](https://hashnode.com/tag/hackthebox)
-   [#hacking](https://hashnode.com/tag/hacking)
-   [#hack-the-box](https://hashnode.com/tag/hack-the-box)
-   [#cbbh](https://hashnode.com/tag/cbbh)
-   [#webhacking](https://hashnode.com/tag/webhacking)
-   [#web-attacks](https://hashnode.com/tag/web-attacks)
-   [#web-security](https://hashnode.com/tag/web-security)

## Written by

[Ido Abramov](https://hashnode.com/@lookkattme)

@lookkattme · Israel

  
[View profile](https://hashnode.com/@lookkattme)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.