https://github.com/commixproject/commix

Automated All-in-One OS Command Injection Exploitation Tool.
https://github.com/commixproject/commix

bugbounty command-injection commix detection exploitation open-source pentesting python takeover vulnerability-scanner

Last synced: 6 days ago
JSON representation

Automated All-in-One OS Command Injection Exploitation Tool.

• Host: GitHub
• URL: https://github.com/commixproject/commix
• Owner: commixproject
• License: other
• Created: 2015-03-20T08:38:26.000Z (about 10 years ago)
• Default Branch: master
• Last Pushed: 2025-04-07T05:33:49.000Z (9 days ago)
• Last Synced: 2025-04-09T19:14:30.545Z (6 days ago)
• Topics: bugbounty, command-injection, commix, detection, exploitation, open-source, pentesting, python, takeover, vulnerability-scanner
• Language: Python
• Homepage: https://commixproject.com
• Size: 6.73 MB
• Stars: 5,236
• Watchers: 157
• Forks: 870
• Open Issues: 10
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE.txt
  • Code of conduct: .github/CODE_OF_CONDUCT.md

Awesome Lists containing this project

• awesome-bbht - commix - Automated All-in-One OS command injection and exploitation tool. https://commixproject.com (Exploitation / Command Injection)
• awesome-bbht - commix - Automated All-in-One OS command injection and exploitation tool. https://commixproject.com (Exploitation / Command Injection)
• awesome-bugbounty-tools - commix - Automated All-in-One OS command injection and exploitation tool. (Exploitation / Command Injection)
• awesome-repositories - commixproject/commix - Automated All-in-One OS Command Injection Exploitation Tool. (Python)
• WebHackersWeapons - commix - in-One OS Command Injection Exploitation Tool.||[`exploit`](/categorize/tags/exploit.md)|[](/categorize/langs/Python.md)| (Weapons / Tools)
• awesome-termux-hacking - commix - Automated All-in-One OS command injection and exploitation tool..[](https://github.com/commixproject/commix/stargazers/) (Uncategorized / Uncategorized)
• awesome-hacking-lists - commixproject/commix - Automated All-in-One OS Command Injection Exploitation Tool. (Python)
• awesome - commixproject/commix - Automated All-in-One OS Command Injection Exploitation Tool. (Python)

README

        


  

  


    

    

    

    

    

  


**Commix** (short for [**comm**]and [**i**]njection e[**x**]ploiter) is an open source penetration testing tool, written by **[Anastasios Stasinopoulos](https://github.com/stasinopoulos)** (**[@ancst](https://x.com/ancst)**), that automates the detection and exploitation of **[command injection](https://www.owasp.org/index.php/Command_Injection)** vulnerabilities.

![Screenshot](https://commixproject.com/images/background.png)

You can visit the [collection of screenshots](https://github.com/commixproject/commix/wiki/Screenshots) demonstrating some of the features on the wiki.

## Installation

You can download commix on any platform by cloning the official Git repository :

    $ git clone https://github.com/commixproject/commix.git commix

Alternatively, you can download the latest [tarball](https://github.com/commixproject/commix/tarball/master) or [zipball](https://github.com/commixproject/commix/zipball/master).

*__Note:__ **[Python](http://www.python.org/download/)** (version **2.6**, **2.7** or **3.x**) is required for running commix.*

## Usage

To get a list of all options and switches use:

    $ python commix.py -h

To get an overview of commix available options, switches and/or basic ideas on how to use commix, check **[usage](https://github.com/commixproject/commix/wiki/Usage)**, **[usage examples](https://github.com/commixproject/commix/wiki/Usage-Examples)** and **[filters bypasses](https://github.com/commixproject/commix/wiki/Filters-Bypasses)** wiki pages.

## Links

* User's manual: https://github.com/commixproject/commix/wiki

* Issues tracker: https://github.com/commixproject/commix/issues

## Translations

* [Farsi(Persian)](https://github.com/commixproject/commix/blob/master/doc/translations/README-fa-FA.md)

* [Greek](https://github.com/commixproject/commix/blob/master/doc/translations/README-gr-GR.md)

* [Indonesian](https://github.com/commixproject/commix/blob/master/doc/translations/README-idn-IDN.md)

* [Turkish](https://github.com/commixproject/commix/blob/master/doc/translations/README-tr-TR.md)