This challenge was an amazing team effort. The final stage was a bash eval injection, but without using any letters or numbers.