There can be many types of Injection. This page has an OS Command Injection flaw. Hint 1 Manipulate Domain Name to inject an OS Command Hint 2 Use a separator (;) to inject an OS command in the Domain Name Solution {domain name}; {OS command} e.g. google.com; pwd