Projects in Awesome Lists tagged with command-injection

https://github.com/commixproject/commix

Automated All-in-One OS Command Injection Exploitation Tool.

bugbounty command-injection commix detection exploitation open-source pentesting python takeover vulnerability-scanner

Last synced: 13 May 2025

https://github.com/payloadbox/command-injection-payload-list

🎯 Command Injection Payload List

application application-security bugbounty command command-injection injection linux macos os os-injection payload payload-list security security-research security-testing security-vulnerability unix vulnerability vulnerability-research windows

Last synced: 15 May 2025

https://github.com/arch3rPro/PentestTools

Awesome Pentest Tools Collection

command-injection exploitation penetration-testing pentest-tool vulnerability-scanners

Last synced: 05 Apr 2025

https://github.com/arch3rpro/pentesttools

Awesome Pentest Tools Collection

command-injection exploitation penetration-testing pentest-tool vulnerability-scanners

Last synced: 27 Jan 2026

https://github.com/hansmach1ne/lfimap

Local File Inclusion discovery and exploitation tool

command-injection exploitation lfi lfi-exploitation local-file-inclusion penetration-testing pentesting python3 remote-code-execution remote-file-inclusion rfi web-application

Last synced: 15 May 2025

https://github.com/jackaduma/nlp4cybersecurity

NLP model and tech for cyber security tasks

code-injection command-injection cross-site-scripting cross-site-scripting-proof cyber-security cybersecurity deep-learning machine-learning malicious-url-detection network-security nlp nlp-deep-learning nlp-machine-learning password-strength phishing-attacks phishing-detection sql-injection text-classification xss-injection

Last synced: 24 Oct 2025

https://github.com/trixsec/waymap

Waymap is a fast and optimized web vulnerability scanner built for penetration testers. It helps in identifying vulnerabilities by testing against various payloads.

command-injection command-injection-scanner command-line-tool exploitation-framework hacking lfi-exploitation open-redirect-detection python scanner sql-scanner sqli-scanner sqlinjection sqlmap ssti trixsec waymap website-hacking website-hacking-tool xss-detection xss-exploitation

Last synced: 10 Apr 2025

https://github.com/dogancanbakir/metamaska

μετάμάσκα - malevolent payload classifier

command-injection cybersecurity hacktoberfest ml path-traversal python sql-injection vulnerability xss

Last synced: 22 Mar 2025

https://github.com/Traumatism/raycharles

Blind RCE fuzzer

bugbounty command-injection fuzz fuzzer fuzzing hacking injection pwn rce remote-code-execution

Last synced: 10 Mar 2025

https://github.com/hartwork/antijack

:ninja: seccomp-based anti-TTY-hijacking proof-of-concept (prevents TIOCSTI and TIOCLINUX)

c99 command-injection doas ioctl libseccomp linux seccomp seccomp-filter seccomp-filtering seccomp-tools security sudo syscall-filter syscalls tioclinux tiocsti tty

Last synced: 18 Sep 2025

https://github.com/twseptian/cve-2022-22947

Spring Cloud Gateway Actuator API SpEL Code Injection (CVE-2022-22947)

command-injection cve-2022-22947 rce remote-code-execution spring-cloud-gateway spring-framework

Last synced: 28 Oct 2025

https://github.com/abaykan/Labs

Repositori ini berisi file-file vulnerable terhadap bug tertentu yang saya jadikan demo pada artikel yang saya tulis di abaykan.com

bug bug-bounty bugbounty bugs command-injection hack hacking lab labs lfi local-file-inclusion writeup xss

Last synced: 10 Mar 2025

https://github.com/noobpk/gemini-web-vulnerability-detection

Gemini-Web Vulnerability Detection (G-WVD) detecting web application vulnerabilities with deep learning

apache-kafka apache-spark artificial-intelligence big-data-analytics command-injection cross-site-scripting deep-learning docker-compose docker-image kafka pyspark sqlinjection vulnerability-detection

Last synced: 26 Apr 2025

https://github.com/copyleftdev/pricklypwn

An advanced RCE tool tailored for exploiting a vulnerability in Cacti v1.2.22. Crafted with precision, this utility aids security researchers in analyzing and understanding the depth of the CVE-2022-46169 flaw. Use responsibly and ethically.

cacti command-injection cve-2022-46169 cybersecurity ethical-hacking exploitation-tool payload penetration-testing rce remote-command-execution reverse-shell security vulnerability-assessment

Last synced: 01 Aug 2025

https://github.com/m3ssap0/cacti-rce-cve-2022-46169-vulnerable-application

WARNING: This is a vulnerable application to test the exploit for the Cacti command injection (CVE-2022-46169). Run it at your own risk!

cacti command-injection cve-2022-46169 rce vulnerable-application

Last synced: 02 Mar 2025

https://github.com/a-mahla/security-pentest-part-i

The first in a series of four machines, each pen-tested and explained.

command-injection enumeration hash privilege-escalation reverse-engineering

Last synced: 08 Oct 2025

https://github.com/tom474/security_attacks_analysis

[RMIT 2024C] COSC2539 - Security in Computing and IT - Programming-based Security Project

command-injection cross-site-scripting denial-of-service security security-attacks sql-injection

Last synced: 04 Mar 2025

https://github.com/backdoorali/user-agent-rce

Educational RCE demo using User-Agent injection.

command-injection cybersecurity-education http-headers offensive-security php-security rce remote-access remote-code-execution user-agent web-exploitation

Last synced: 22 Jun 2025

https://github.com/mbadanoiu/cve-2020-8250

CVE-2020-8250: Privilege Escalation via Command Injection in Pulse Secure VPN Linux Client

0-day command-injection cve cve-2020-8250 cves local-privilege-escalation

Last synced: 05 Mar 2026

https://github.com/kiran-kumar-k3/vulnerability-payload-lists

A curated repository of categorized payloads for testing and exploiting common web vulnerabilities in ethical hacking and penetration testing.

bugbounty command-injection payload-lists payloads sql sqli-payloads vulnerability-testing xss xss-payloads xxe

Last synced: 02 Feb 2026

https://github.com/gill-singh-a/sharn-web-desktop

A Simple CTF Challenge that expects user to see Client Side Login Algorithm, Path Traversal and Command Injection

command-injection ctf flask path-traversal python web

Last synced: 24 Jul 2025

https://github.com/m3ssap0/cacti-rce-snmp-options-vulnerable-application

WARNING: This is a vulnerable application to test the exploit for the Cacti command injection (CVE-2023-39362). Run it at your own risk!

cacti command-injection cve-2023-39362 rce vulnerable-application

Last synced: 30 Aug 2025

https://github.com/labex-labs/web-vulnerability-mastery

In this course, you will learn about the most common web vulnerabilities and how to exploit them. You will learn about SQL Injection, File Inclusion, Cross-Site Scripting (XSS), File Upload, Command Injection, and Directory Traversal vulnerabilities. You will also learn how to exploit these vulnerabilities using various techniques and tools.

command-injection course directory-traversal ethical-hacking exploitation file-inclusion hacking hands-on labex labs owasp pen-testing penetration-testing programming security-testing sql-injection vulnerability-assessment web-application web-security xss