Skip to content

Latest commit

 

History

History
32 lines (29 loc) · 520 Bytes

04.Command_Injection.md

File metadata and controls

32 lines (29 loc) · 520 Bytes

Command Injection

My own technique for web sec

  1. Understanding
  2. User Input
  3. Output / Blind
  4. Escaping / Evasion
  5. Fuzzing

Understanding

https://www.php.net/manual/en/ref.exec.php

User Input

$_GET / $_POST

Output / Blind

uname -a // showing output
nc // not showing output

Escaping / Evasion

Web for Pentester - Command Execution

Fuzzing Automated test

https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Command%20Injection