Escaping a space-stripping shell with no PATH using brace expansion and absolute paths
Bypassing a no-lowercase no-symbol bash jail with tilde-plus and question-mark globs to run the flag script
