3d ago · 22 min read · In Part 1 of this series, we cover OS command injection vulnerabilities from a developer's perspective. We looked at secure coding approaches with ProcessBuilder, whitelist-based validation strategies
Join discussion
Feb 28 · 4 min read · A Command Injection Investigation | LetsDefend SOC Lab Today’s alert immediately caught my attention: Whoami Command Detected in Request Body At first glance, it may look like a harmless Linux command
Join discussion
Dec 31, 2025 · 2 min read · The Mission: Decoding the Drone Disturbance The town's drone scheduler started behaving erratically, receiving strange, unusually long HTTP requests containing Base64 chunks. The goal for this "Boss Rush" stage was to act as a Blue Teamer (defender) ...
Join discussion
Oct 2, 2025 · 1 min read · Vulnerability Command injection vulnerability exists in index.php of pfBlockerNG. Host header, which is user input, is entered into exec. <?php /* index.php pfBlockerNG (DNSBL) Copyright (c) 2015-2016 BBcan177@gmail.com All rights re...
Join discussionAug 30, 2025 · 3 min read · 📝 Quick Summary: Commix is an open-source penetration testing tool written in Python that automates the detection and exploitation of command injection vulnerabilities. It allows security professionals and researchers to identify and exploit command...
Join discussion
