Update 3:
Another good command injection practice is machine “Obscurity”.
Though it is a basic injection, it is a good exercise to start with.
All updates to OSWE study guide:
-Auth bypass, on box “Smasher2”
-.net deserialization, on box “Json”
-command injection, on box “Obscurity”