This challenge was quiet interesting:
Abusing a web OSInjection bypassing the “echo” command and finding a work around for to the maximum number of char who can be submitted was challenging enough for being not that obvious and easy but not frustrating or ‘try and guess’.