Automed Shell Injections with Commix and the Commix Testbed

Commix is a tool that can be used to find and understand OS Command Injections (aka Shell Injections), and in this video, you'll learn how to use it.

This video is from our free course: Introduction to OS Command Injections, which is available here: https://cybr.com/courses/introduction-to-os-command-injections/

Get started with Commix - 00:00 - 2:57 Launch the Commix Testbed - 02:58 - 05:38 Commix commands walkthrough - 05:38 - 08:18 Classic results-based injection attack - 08:18 - 09:35 Pseudo-Terminal shell access - 09:36 - 11:08 Collecting information about the target with Commix - 11:09 - 12:40 User-Agent HTTP Header injection - 12:41 - 15:10 Wrapping up - 15:11 - 15:30 ... https://www.youtube.com/watch?v=dN_PZ-AGDWE