PortSwigger - OS Command Injection, Simple Case
This video discusses the "OS Command Injection, Simple Case" lab. This lab explores an OS Command Injection vulnerability in a product stock checker. The application executes a shell command containing user-supplied product and store IDs, and returns a response containing raw data. To complete the lab, run the "whoami" command to view the current system user name.
Command injection is a security attack that occurs when an application or system fails to properly validate or filter user input containing system commands. This attack allows an attacker to insert unauthorized or malicious commands into the input received by the system, which are then executed by the system.
--------------------------------------------------
==// Social Media //==
📷 Instagram 📷 / rionreeffx
🐦 Twitter 🐦 / rionreeffx
==// Other (FB, Telegram, Github, etc.) //==
🌳 Linktree 🌳 https://linktr.ee/rionreeffx
==// Support / Donate //==
🍵 trakteer 🍵 https://trakteer.id/rionreeffx
🐱 saweria 🐱 https://saweria.co/rionreeffx
--------------------------------------------------
DISCLAIMER: Hacking without permission is illegal. This video is intended solely for educational purposes about cybersecurity in the fields of ethical hacking and penetration testing, so we can protect ourselves from real hackers.
--------------------------------------------------
#commandinjection #portswigger #cybersecurity #ethicalhacking #pentest