cmd-injection

What problem does it solve?

This Skill helps identify and exploit vulnerabilities where user input is passed unsanitized to a system shell, allowing attackers to execute arbitrary commands on the server.

Core Features & Use Cases

• Vulnerability Detection: Identifies parameters susceptible to command injection by testing shell metacharacters and time-delay payloads.
• Exploitation: Provides methods for data exfiltration and command execution in blind injection scenarios.
• Use Case: A pentester can use this skill to confirm if a web application parameter that accepts hostnames is vulnerable to command injection, and then attempt to read sensitive files like /etc/passwd.

Quick Start

Use the cmd-injection skill to test the parameter 'host' on the target URL 'http://example.com/ping' for command injection vulnerabilities.