Tags: wildcards command-injection 

Rating: 0

1. Notice the cmd argument with limited RCE
2. Use wildcards to reach the right binary and flag file

Full writeup: https://github.com/p4-team/ctf/tree/master/2019-11-07-defcamp-finals/simple-notes