Getting Remote Code Execution on a Web Server

Rubik and his team penetrate the web side of a company. They find no obvious vulnerabilities, so they start digging into lesser known ones. One hacker finds remote code execution on one of the webabs. This is bad because people in the inner net should never be allowed to execute commands on your web server directly. From there, they can do a lot of malicious things.