A website can be your way into the computer hosting it. To handle a request, a web application might open a file or run a command, using input you've supplied to decide what to do. If the application handles that input carelessly, you may be able to read files that were never meant to be public or execute commands of your own.
That access can expose source code, credentials, and other secrets stored on the server. Command execution can give you a shell with the application's permissions, putting the shell skills you've already practiced to work on someone else's machine! In this module, you'll follow your input through web applications and exploit the mistakes that make this possible.
