A little network tool — give it a host and it pings it.
Demo 4 — Command injection: the server runs ping <host>
in a shell. Send it to Repeater and put ; whoami after the host — e.g.
8.8.8.8; whoami. The server runs your command too. Try
; ls or ; cat flag.txt 👀