trying to learn the command injection attacks in serverless goat, but I am facing a message forbidden error. can any help me through