Vulnerability field guide
Command Injection
OS command injection turns a harmless-looking parameter into a shell prompt for an attacker. Here is how shell metacharacters escape into system commands, the blind variants, and the fix that ends it.
3 articles18 min totalOverview to advanced techniques
Start here
; idStep 01 · Start with the overview
Command Injection7 min read
Command Injection: How One Semicolon Hands Over Your Server
OS command injection turns a harmless-looking parameter into a shell prompt for an attacker. Here is how shell metacharacters escape into system commands, the blind variants, and the fix that ends it.
Read the overviewContinue the field guide
2 focused deep-dives