Command Injection Filter Bypass

1import subprocess
2
3def run_diagnostic(target):
4    # "Security" filter - block dangerous characters
5    blocked = [';', '|', '&', '$', '`', '>', '<']
6    for char in blocked:
7        if char in target:
8            return "Invalid input"
9    
10    cmd = f"ping -c 1 {target}"
11    result = subprocess.run(cmd, shell=True, capture_output=True, text=True)
12    return result.stdout