HTB Academy Windows Privilege Escalation Skills Assessment

On the target there is an HTTP server running. On the page there is an input field letting you ping selected IPs. My hint is to try playing around with that field and command injection.