Fixed stage cmd abuse with challenge