Turning a user value into argv so a called binary parses it as a flag—no shell needed—plus worst-fit and fullwidth-character tricks and the escapeshellarg/escapeshellcmd bypass concept.