os-command-injection
There are 16 repositories under os-command-injection topic.
OSTEsayed/OSTE-Meta-Scan
The OSTE meta scanner is a comprehensive web vulnerability scanner that combines multiple DAST scanners, including Nikto Scanner, ZAP, Nuclei, SkipFish, and Wapiti.
omurugur/OS_Command_Payload_List
OS Command Injection Vulnerability Payload List
OSTEsayed/OSTE-Vulnerable-Web-Application
Vulnerable Web application made with PHP/SQL designed to help new web testers gain some experience and test DAST tools for identifying web vulnerabilities. Containing some of the most well-known vulnerabilities such as SQL, cross-site scripting (XSS), OS command injections, our intention to expand more vulnerabilities for learning purposes.
DevanshRaghav75/PayloadsOfAllTheThings
A collection of payloads for different vulnerabilities, best payload lists in one repository
polarspetroll/EscapeAPI
An API for escaping different kind of queries
moeinfatehi/lfi-to-rce-scenario
This repository is a Dockerized php application containing a LFI (Local File Inclusion) vulnerability which can lead to RCE (Remote Code Execution).
GitHub30/shell2http
Executing shell commands via HTTP server
hotpotcookie/CVE-2022-44877-white-box
Red Team utilities for setting up CWP CentOS 7 payload & reverse shell (Red Team 9 - CW2023)
Sec0gh/Portswigger-Labs
Writeups for portswigger labs.
aress31/cve-2017-12945
Exploit for CVE-2017-12945.
mrmtwoj/WAFManis
WAFManis is a Protocol-Level WAF Evasion Fuzzing Tool that automates the discovery of evasion vulnerabilities in Web Application Firewalls (WAFs) by fuzzing HTTP requests to identify potential bypass techniques.
Stuub/CVE-2025-3969-Exploit
CVE-2025-3969: Exploit PoC (OS CMD injection, Web Shell, Interactive Shell)
GitHub30/shell2udp
Executing shell commands via UDP server
qeeqbox/os-command-injection
A threat actor may inject arbitrary operating system (OS) commands on target
utkuonursahin/injections
SQL Injection and OS Command Injection demo application.
Am0stafa/os-command-injection-poc
An example of how custom commands are executed on a cloud server if an application is vulnerable to os command injection